CVE-2019-8526 — VulnIntel

CVE-2019-8526

HIGH

KEV

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Mojave 10.14.4. An application may be able to gain elevated privileges.

StatusAnalyzed

설명

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Mojave 10.14.4. An application may be able to gain elevated privileges.

Score Summary

CVSS Score: 7.8
Version: 3.1
VPI: 100
Why this VPI (explainable, experimental)
VPI breakdown
Impact 78.00
Exploitation signal(KEV listed) ×1.50
VPI 100.00
VPI formula vpi-v1
EPSS: 0.7%
(상위 49.1%)
Attack Vector: Local Access
Low Complexity
Low Privileges
No User Interaction
Scope Unchanged
High Confidentiality Impact
High Integrity Impact
High Availability Impact

Details

Published: 12/18/2019(7 years ago)
Modified: 10/23/2025(9 months ago)
Source: KEV, NVD
Products: 1

CISA KEV Listing

Vendor / Project: Apple
Product: macOS

Date Added: 04/17/2023
Due Date: 05/08/2023Overdue 1171d

Required Action

Apply updates per vendor instructions.

Vulnerability Lifecycle

NVDPublished12/18/2019
CISA KEVKEV Listed04/17/2023
CISA KEV

Score Comparison by Source

Source	CVSS Version	Base Score	Severity	Vector String	Assessment Date
NVDNIST	3.1	7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	04/20/2026
NVDNIST	2.0	7.2

CWE Weakness Classification

CWE-416
NVD
Secondary

References (2)

Affected Products (1)

Impact	78.00
Exploitation signal(KEV listed)	×1.50
VPI	100.00