macOS 10.14.x < 10.14.4 Multiple Vulnerabilities

critical Nessus Network Monitor Plugin ID 700522


The remote host is missing a macOS update that fixes multiple security vulnerabilities.


The remote host is running a version of macOS / Mac OS X that is 10.14.x prior to 10.14.4. It is, therefore, affected by multiple vulnerabilities, including:

- Mounting a maliciously crafted NFS network share may lead to arbitrary code execution with system privileges. (CVE-2019-8508)

- An application may be able to execute arbitrary code with kernel privileges. (CVE-2019-8529)

- A malicious application may be able to execute arbitrary code with system privileges (CVE-2019-8549)


Upgrade to macOS version 10.14.4 or later.

See Also

Plugin Details

Severity: Critical

ID: 700522

Published: 4/10/2019

Updated: 4/10/2019

Nessus ID: 123128

Risk Information


Risk Factor: Critical

Base Score: 10

Temporal Score: 7.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:POC/RL:OF/RC:C


Risk Factor: Critical

Base Score: 9.6

Temporal Score: 8.6

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C

Vulnerability Information

CPE: cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*

Patch Publication Date: 3/25/2019

Vulnerability Publication Date: 3/25/2019

Reference Information

CVE: CVE-2018-18311, CVE-2018-18313, CVE-2018-12015, CVE-2019-6237, CVE-2019-8517, CVE-2019-8565, CVE-2019-8516, CVE-2019-8552, CVE-2019-8511, CVE-2019-8542, CVE-2019-8545, CVE-2019-8527, CVE-2019-8540, CVE-2019-8514, CVE-2019-6207, CVE-2019-8510, CVE-2019-7293, CVE-2019-8546, CVE-2019-8549, CVE-2019-8502, CVE-2019-8530, CVE-2019-8555, CVE-2019-6239, CVE-2019-8522, CVE-2019-8550, CVE-2019-8521, CVE-2019-8519, CVE-2019-8533, CVE-2019-8504, CVE-2019-8529, CVE-2019-8508, CVE-2019-8537, CVE-2019-8561, CVE-2019-8507, CVE-2019-8526, CVE-2019-8520, CVE-2019-8513

BID: 104423, 106145, 106072