CVE-2019-8805

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 2.6%

exploitation probability

2.6%top 16% of all CVEs

observed exploitation

nono source reports it

A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement. This issue is fixed in macOS Catalina 10.15.1. An application may be able to execute arbitrary code with system privileges.

Affected products

Apple · macOS

References

https://support.apple.com/HT210722