CVEvulnerability
CVE-2019-8848
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2020-10-27
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Description
This issue was addressed with improved checks. This issue is fixed in tvOS 13.3, watchOS 6.1.1, iCloud for Windows 10.9, macOS Catalina 10.15.2, Security Update 2019-002 Mojave, and Security Update 2019-007 High Sierra, iOS 13.3 and iPadOS 13.3, iTunes 12.10.3 for Windows, iCloud for Windows 7.16. An application may be able to gain elevated privileges.
Affected configurations
• apple icloud (< 7.16)
• apple icloud (>= 10.0 < 10.9)
• apple itunes (< 12.10.3)
• apple safari (< 13.0.3)
• apple ipados (< 13.3)
• apple iphone os (< 13.3)
• apple mac os x (< 10.15.2)
• apple tvos (< 13.3)
• apple watchos (< 6.1.1)
References
- https://support.apple.com/en-us/HT210785 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT210788 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT210789 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT210790 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT210793 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT210794 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT210795 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT210785 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT210788 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT210789 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT210790 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT210793 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT210794 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT210795 Release Notes, Vendor Advisory