CVE-2019-8809

LOW

iPadOS < 13.1 - Unprotected User Data Exposure via Validation Issue

Title source: llm
STIX 2.1

Description

A validation issue was addressed with improved logic. This issue is fixed in macOS Catalina 10.15, iOS 13.1 and iPadOS 13.1, tvOS 13, watchOS 6, iOS 13. A local app may be able to read a persistent account identifier.

References (5)

Core 5
Core References
Release Notes, Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT210634
Release Notes, Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT210604
Release Notes, Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT210606
Release Notes, Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT210607
Release Notes, Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT210603

Scores

CVSS v3 3.3
EPSS 0.0031
EPSS Percentile 23.4%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Details

Status published
Products (5)
apple/ipados < 13.1
apple/iphone_os < 13.1
apple/mac_os_x < 10.15
apple/tvos < 13.0
apple/watchos < 6.0
Published Oct 27, 2020
Tracked Since Feb 18, 2026