What’s Vulnerable › Vulnerabilities

CVE-2019-10038

• Severity: high (CVSS 7.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-05-31 · updated 2026-06-17
• Weakness: CWE-22

Description

Evernote 7.9 on macOS allows attackers to execute arbitrary programs by embedding a reference to a local executable file such as the /Applications/Calculator.app/Contents/MacOS/Calculator file.

Affected products

• Evernote for Windows: 7.9

References

• https://drive.google.com/file/d/1cmWixK1vAh7oZ2y3Y3ZtVeSoTRp8c1Ts/view?usp=sharing
• https://evernote.com/security/updates
• https://www.inputzero.io/2019/04/evernote-cve-2019-10038.html
• https://drive.google.com/file/d/1cmWixK1vAh7oZ2y3Y3ZtVeSoTRp8c1Ts/view?usp=sharing
• https://evernote.com/security/updates
• https://www.inputzero.io/2019/04/evernote-cve-2019-10038.html

Get alerted when CVE-2019-10038 or the next vulnerability affects your stack