PT-2019-19117

CVE-2019-8606

·

Published

2019-05-30

·

Updated

2019-12-23

Description by

CVSS 3.1
7.0
High
MetricsAV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Apple macOS versions prior to 10.14.5
Description A validation issue existed in the handling of symlinks, which has been addressed with improved validation. This could have allowed a local user to load unsigned kernel extensions, potentially leading to privilege escalation.
Recommendations For versions prior to 10.14.5, update to macOS Mojave 10.14.5 to resolve the issue.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
ZDI-19-541
Found an issue in the description? Have something to add? Feel free to write us 👾