VULNERABILITY INTELLIGENCE
CVE-2019-8779
CVSS score10 CRITICAL
EPSS probability1.47%
CISA KEVNot currently listed
Published2019-12-18
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Description
A logic issue applied the incorrect restrictions. This issue was addressed by updating the logic to apply the correct restrictions. This issue is fixed in iOS 13.1.1 and iPadOS 13.1.1. Third party app extensions may not receive the correct sandbox restrictions.
Weakness classification
- nvd@nist.gov: CWE-668
Primary references
- product-security@apple.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory