CVE-2019-8736

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

An input validation issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, macOS Catalina 10.15. An attacker in a privileged network position may be able to leak sensitive user information.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-20

Affected software

VendorProductVersions
ApplemacOS>= unspecified, < 10.15
ApplemacOS>= unspecified, < 10.15

References

Timeline

Published
Oct 27, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-87376.5A denial of service issue was addressed with improved validation. This issue is fixed in macOS Catalina 10.15.1, Security Update 2019-001, aCVE-2019-87387.8A memory corruption issue was addressed with improved state management. This issue is fixed in Xcode 11.0. Processing a maliciously crafted CVE-2019-87397.8A memory corruption issue was addressed with improved state management. This issue is fixed in Xcode 11.0. Processing a maliciously crafted CVE-2019-87407.8A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 13.1 and iPadOS 13.1, watchOS 6, tvOS 13. CVE-2019-87417.5A denial of service issue was addressed with improved input validation.CVE-2019-87422.4The issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 13. A person with physical access to aCVE-2019-87438.8Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in watchOS 6.1. Processing maliciously cCVE-2019-87445.5A memory corruption issue existed in the handling of IPv6 packets. This issue was addressed with improved memory management. This issue is fCVE-2019-87458.8A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15, tvOS 13, iTunes for Windows 12.1CVE-2019-87469.8An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15, iOS 13, iCloud for Windows CVE-2019-87477.8A memory corruption vulnerability was addressed with improved locking. This issue is fixed in watchOS 6.1. An application may be able to exeCVE-2019-87487.8A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15. An application may be ab
CVE-2019-8736: Medium severity, CVSS 6.5 | Vulnix