CVE-2019-8839
macOS vulnerability analysis and mitigation

Overview

CVE-2019-8839 is a security vulnerability affecting Apple's CUPS (Common Unix Printing System) component in macOS Catalina 10.15, macOS Mojave 10.14.6, and macOS High Sierra 10.13.6. The vulnerability was discovered by Stephan Zeisberg of Security Research Labs and was disclosed in December 2019 as part of Apple's security updates (Apple Security).

Technical details

The vulnerability is a buffer overflow issue in the CUPS printing system. The issue was addressed with improved bounds checking in the system implementation (Apple Security).

Impact

When exploited, an attacker in a privileged position may be able to perform a denial of service attack against the affected system (Apple Security).

Exploitability

The vulnerability requires the attacker to be in a privileged position to exploit the buffer overflow condition. No public exploits were reported at the time of disclosure (Apple Security).

Mitigation and workarounds

Apple addressed this vulnerability in macOS Catalina 10.15.2, Security Update 2019-002 Mojave, and Security Update 2019-007 High Sierra, released on December 10, 2019. Users are advised to update their systems to these versions to receive the security fix (Apple Security).

Additional resources


SourceThis report was generated using AI

Related macOS vulnerabilities:

CVE ID

Severity

Score

Technologies

Component name

CISA KEV exploit

Has fix

Published date

CVE-2026-65346HIGH8.8
  • macOS logomacOS
  • ImageIO
NoYesAug 17, 2026
CVE-2026-65349MEDIUM6.6
  • macOS logomacOS
  • Kernel
NoYesAug 17, 2026
CVE-2026-65347MEDIUM6.5
  • macOS logomacOS
  • ImageIO
NoYesAug 17, 2026
CVE-2026-20679MEDIUM4.3
  • macOS logomacOS
  • CoreUI
NoYesAug 21, 2026
CVE-2026-65351MEDIUM4.3
  • Apple Safari logoApple Safari
  • WebKit
NoYesAug 17, 2026

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management