Published: 18/12/2019 Updated: 19/12/2019

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 755

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Mojave 10.14.6. A remote attacker may be able to cause arbitrary code execution.

Vulnerable Product	Search on Vulmon	Subscribe to Product
apple mac os x

There is a heap overflow in [NSURL initWithCoder:] that can be reached via iMessage and likely other paths When an NSURL is deserialized, one property its plist can contain is NSminimalBookmarkData, which is then used as a parameter for [NSURL URLByResolvingBookmarkData:options:relativeToURL:bookmarkDataIsStale:error:] This method uses a wide va ...

Full Disclosure mailing list archives   By Date By Thread </form>    APPLE-SA-2019-8-13-1 Additional information for APPLE-SA-2019-7-22-2 macOS Mojave 10146, Security Update 2019-004 Hig ...

CWE-416 https://support.apple.com/HT210348 https://nvd.nist.gov https://www.exploit-db.com/exploits/47207

CVE-2019-8661

Vulnerability Summary

Vulnerability Trend

Exploits

Mailing Lists

References

Vulmon Search

About

Products

Connect