VULNERABILITY INTELLIGENCE

CVE-2019-8790

CVSS score5.5 MEDIUM

EPSS probability0.35%

CISA KEVNot currently listed

Published2020-10-27

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

This issue was addresses by updating incorrect URLSession file descriptors management logic to match Swift 5.0. This issue is fixed in Swift 5.1.1 for Ubuntu. Incorrect management of file descriptors in URLSession could lead to inadvertent data disclosure.

Weakness classification

CWE-922: Insecure Storage of Sensitive Information

Primary references

product-security@apple.com — Release Notes, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Release Notes, Vendor Advisory