Vulnerability Intelligence Report
CVE-2019-8779
A logic issue applied the incorrect restrictions. This issue was addressed by updating the logic to apply the correct restrictions. This issue is fixed in iOS 13.1.1 and iPadOS 13.1.1. Third party app extensions may not receive the correct sandbox restrictions.
No Active Exploit Signals
CVSS Base Score
10.0
CRITICAL
EPSS Probability:1.47%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| Apple | iOS | unspecified < iOS 13.1.1 and iPadOS 13.1.1 (affected) |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
1.470%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | Apple Inc. · Vendor · USA |
| Reserved | 2019-02-18T00:00:00 |
| Published | 2019-12-18T17:33:22 |
| Last Updated | 2024-08-04T21:31:37 |
Community Chatter & Buzz