VULNERABILITY INTELLIGENCE

CVE-2019-8620

CVSS score7.5 HIGH

EPSS probability1.51%

CISA KEVNot currently listed

Published2019-12-18

Last modified2026-06-17

Description

A user privacy issue was addressed by removing the broadcast MAC address. This issue is fixed in iOS 12.3, tvOS 12.3, watchOS 5.2.1. A device may be passively tracked by its WiFi MAC address.