CVE-2019-8801

7.8 highEPSS 0.4%

High (7.8) in apple. EPSS 0.4% chance of exploitation in the next 30 days.

A dynamic library loading issue existed in iTunes setup. This was addressed with improved path searching. This issue is fixed in macOS Catalina 10.15.1, iTunes for Windows 12.10.2. Running the iTunes installer in an untrusted directory may result in arbitrary code execution.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 32% of CVEs (scores of 2026-10-31)
CWE: CWE-426
Published: 2019-12-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

apple:itunes
apple:mac_os_x

References

https://support.apple.com/HT210722
https://support.apple.com/HT210726
https://support.apple.com/HT210722
https://support.apple.com/HT210726

Check your stack JSON