CVE-2019-6238

A validation issue existed in the handling of symlinks

published October 27, 2020

CVSS
—
EPSS
1%
Percentile
66.8
In the wild
Unconfirmed
What it is

A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra. Processing a maliciously crafted package may lead to arbitrary code execution.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01156 · 66.8th percentile
Published
2020-10-27T19:22Z
EPSS history
Timeline
  • 27 OCT 19:22Z
    A validation issue existed in the handling of symlinks
    cvelistv5