CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Showing 1–1 of 1 advisories (Page 1/1)

CVE-2019-72867.8/HIGHEPSS 15.9%CISA KEV

2019-12-18

Apple iOS and macOS Foundation Framework Memory Corruption Local Privilege Escalation Vulnerability (CVE-2019-7286) Analysis and Mitigation Guide

[Affected Scope] Apple iOS devices prior to version 12.1.4 and macOS Mojave systems prior to 10.14.3 Supplemental Update

[Impact] A local application can exploit a memory corruption vulnerability to bypass sandboxing and gain elevated system privileges

[Mitigation] Immediately apply the official security patches (iOS 12.1.4, macOS 10.14.3 Supplemental Update, or later)