CVE-2019-8659
HIGHwatchOS < 5.3 - Unauthenticated State Manipulation in iMessage Conversation
Title source: llmDescription
This issue was addressed with improved checks. This issue is fixed in watchOS 5.3. Users removed from an iMessage conversation may still be able to alter state.
References (1)
Core 1
Core References
Vendor Advisory x_refsource_misc
https://support.apple.com/HT210353
Scores
CVSS v3
7.5
EPSS
0.0081
EPSS Percentile
53.1%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Details
Status
published
Products (1)
apple/watchos
< 5.3
Published
Dec 18, 2019
Tracked Since
Feb 18, 2026