CVE-2019-8526
Apple macOS Use-After-Free Vulnerability
Published Dec 18, 2019 · updated Jun 16, 2026 · apple mac os x
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Mojave 10.14.4. An application may be able to gain elevated privileges.
Timeline
Detection, updates, and resolution for this record.
Dec 18, 2019 · Catalog
Detected
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Mojave 10.14.4. An application may be able to gain elevated privileges.
Apr 17, 2023 · CISA KEV
Known exploited
Apply updates per vendor instructions.
May 8, 2023 · CISA KEV
Remediation due
Apply updates per vendor instructions.
Jun 16, 2026 · Catalog
Updated
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Mojave 10.14.4. An application may be able to gain elevated privileges.
Required action
Apply updates per vendor instructions.
CISA due date May 8, 2023
Affected
- cpe apple/mac os xversion unspecified
- vendor Apple macOSversion unspecified
Sources
- CISA KEVCVE-2019-8526
Apple macOS contains a use-after-free vulnerability that could allow for privilege escalation.
cisa.gov - CVE.orgCVE-2019-8526
Official CVE identifier
cve.org - FIRST EPSSCVE-2019-8526
30-day exploitation probability 0.7%
first.org - NIST NVDCVE-2019-8526
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Mojave 10.14.4. An application may be able to gain elevated privileges.
nvd.nist.gov