CVE-2019-10038 EXPLOIT
7.8
HIGH · CVSS 3.0 · EPSS 1.3% (pctl 70)
Patch early
A public exploit exists.
Description
Evernote 7.9 on macOS allows attackers to execute arbitrary programs by embedding a reference to a local executable file such as the /Applications/Calculator.app/Contents/MacOS/Calculator file.
Scoring
| CVSS | 7.8 (HIGH, v3.0) |
|---|---|
| Vector | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| EPSS | 1.31% — more likely to be exploited than 70% of all CVEs |
| Weakness | CWE-22 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2019-05-31 |
| Last modified | 2026-06-17 |
Affected (1)
| Vendor | Product |
|---|---|
| evernote | evernote |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Evernote 7.9 - Code Execution via Path Traversal | 2019-04-18 |
References
- https://drive.google.com/file/d/1cmWixK1vAh7oZ2y3Y3ZtVeSoTRp8c1Ts/view?usp=sharing
- https://evernote.com/security/updates
- https://www.inputzero.io/2019/04/evernote-cve-2019-10038.html
- https://drive.google.com/file/d/1cmWixK1vAh7oZ2y3Y3ZtVeSoTRp8c1Ts/view?usp=sharing
- https://evernote.com/security/updates
- https://www.inputzero.io/2019/04/evernote-cve-2019-10038.html
→ the Explorer · watch your stack · NVD