First published: Mon Mar 25 2019(Updated: )
A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state management. This issue is fixed in macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra. A local attacker may be able to view contacts from the lock screen.
Credit: product-security@apple.com Abdullah H. AlJaber @aljaber AJ
Affected Software | Affected Version | How to fix |
---|---|---|
Apple Mac OS X | <10.14.4 | |
Apple macOS Mojave | <10.14.4 | 10.14.4 |
Apple High Sierra | ||
Apple Sierra |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
The severity of CVE-2019-8777 is low (CVSS score: 2.4).
CVE-2019-8777 was fixed in macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, and Security Update 2019-002 Sierra.
CVE-2019-8777 affects macOS Mojave 10.14.4, Apple macOS Mojave (up to exclusive version 10.14.4), Apple High Sierra, and Apple Sierra.
The Common Weakness Enumeration (CWE) ID for CVE-2019-8777 is 276.
You can find more information about CVE-2019-8777 at: https://support.apple.com/en-us/HT209600