CVE-2019-8698

A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement. This issue is fixed in iOS 12.4, tvOS 12.4. A malicious application may be able to restrict access to websites.

Score

CVSS 3.1 3.3 Low

Status

Modified - product-security@apple.com

Published

2019-12-18

Last modified

2024-08-04

Weaknesses

CWE-20

Affected products

• Ios (Apple)
• Iphone Os (Apple)
• Tvos (Apple)

References

• https://support.apple.com/HT210346
• https://support.apple.com/HT210351