CVE-2019-8717 EXPLOIT
7.8
HIGH · CVSS 3.1 · EPSS 1.3% (pctl 69)
Patch early
A public exploit exists.
Description
A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15, tvOS 13. An application may be able to execute arbitrary code with kernel privileges.
Scoring
| CVSS | 7.8 (HIGH, v3.1) |
|---|---|
| Vector | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 1.29% — more likely to be exploited than 69% of all CVEs |
| Weakness | CWE-787 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2019-12-18 |
| Last modified | 2026-06-17 |
Affected (2)
| Vendor | Product |
|---|---|
| apple | mac os x |
| apple | tvos |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | XNU - Remote Double-Free via Data Race in IPComp Input Path | 2019-10-09 |
References
→ the Explorer · watch your stack · NVD