Apple · macOS
CVE-2019-8526
Apple macOS Use-After-Free Vulnerability
Exploited in attacks
High 7.8 Attack chance: 0.7%
What it is
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Mojave 10.14.4. An application may be able to gain elevated privileges.
CISA: Apple macOS contains a use-after-free vulnerability that could allow for privilege escalation.
What to do
Apply updates per vendor instructions.
Deadline for US federal agencies: May 8, 2023
- Added to the CISA list
- April 17, 2023
- Published
- December 18, 2019
- Severity
- High 7.8 CVSS 3.1
- Chance of attacks in the next 30 days (EPSS)
- 0.7% in the top 47.0% of all known vulnerabilities
- Weakness
- CWE-416
- More details
- NVD · CVE.org · CISA
All references (1)
More exploited flaws from Apple
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Aug 18, 2026 | Improper Authentication | macOS | Critical 9.8 | 1.7% |
| Apr 4, 2022 | Out-of-Bounds Read | macOS | Medium 5.5 | 1.1% |
| Apr 4, 2022 | Out-of-Bounds Write | macOS | High 7.8 | 12% |
| Nov 3, 2021 | Unspecified | macOS | Medium 5.5 | 69% |
| Nov 3, 2021 | Unspecified | macOS | High 7.8 | 7.0% |
| Sep 29, 2026 | Out-of-Bounds Write | Multiple Products | High 8.8 | 26% |
| Mar 20, 2026 | Buffer Overflow | Multiple Products | High 8.8 | 1.7% |
| Mar 20, 2026 | Improper Locking | Multiple Products | High 7.8 | 0.4% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.