
Cloud Vulnerability DB
A community-led vulnerabilities database
CVE-2019-8509 is a privilege escalation vulnerability discovered in Apple's File Quarantine component of macOS. The vulnerability was first identified in February 2019 and was later patched in macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006. The vulnerability affected macOS High Sierra 10.13.6 and macOS Mojave 10.14.6 operating systems (Apple Support).
The vulnerability existed in the File Quarantine component of macOS where a malicious application could potentially elevate its privileges. Apple addressed this security issue by completely removing the vulnerable code from the system (Apple Support). The vulnerability was discovered by CodeColorist of Ant-Financial LightYear Labs (CVE Mitre).
If exploited, this vulnerability would allow a malicious application to elevate its privileges on the affected system, potentially gaining higher levels of access than intended (Apple Support).
The vulnerability required a malicious application to be present on the system to exploit the privilege escalation flaw. No public exploits were documented at the time of disclosure (Apple Support).
Apple addressed this vulnerability by releasing security updates in macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006. Users were advised to update their systems to these versions to protect against this vulnerability (Apple Support).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."