CVE-2019-8745

CVE-2019-8745: vulnerability in Apple macOS

Published 18 Dec 2019 · Updated 04 Aug 2024

Follow this CVE + Monitor macOS + Monitor tvOS

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 2.2%

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15, tvOS 13, iTunes for Windows 12.10.1, iCloud for Windows 10.7, iCloud for Windows 7.14. Processing a maliciously crafted text file may lead to arbitrary code execution.

Affected products

Apple · iCloud for Windows Apple · iCloud for Windows (Legacy)Apple · iTunes for Windows Apple · macOS Apple · tvOS

Related CVEs — Apple macOS

In the same product, most dangerous first.

CVE-2019-8506HIGHCVE-2019-8506EPSS 16.2%KEV CVE-2020-9850—CVE-2020-9850EPSS 77.4%CVE-2019-8600—CVE-2019-8600EPSS 20.3%CVE-2019-8689—CVE-2019-8689EPSS 13.6%CVE-2019-8518—CVE-2019-8518EPSS 11.2%CVE-2019-8672—CVE-2019-8672EPSS 11.1%

References

https://support.apple.com/HT210634 https://support.apple.com/HT210635 https://support.apple.com/HT210636 https://support.apple.com/HT210637 https://support.apple.com/kb/HT210722