High severity7.8NVD Advisory· Published May 31, 2019· Updated Jun 17, 2026

CVE-2019-10038

Description

Evernote 7.9 on macOS allows attackers to execute arbitrary programs by embedding a reference to a local executable file such as the /Applications/Calculator.app/Contents/MacOS/Calculator file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Evernote/Evernote2 versions
cpe:2.3:a:evernote:evernote:7.9:*:*:*:*:macos:*:*+ 1 more
- cpe:2.3:a:evernote:evernote:7.9:*:*:*:*:macos:*:*
- (no CPE)range: <7.9
Evernote/Evernotedescription

Patches

Vulnerability mechanics

References

evernote.com/security/updatesnvdVendor Advisory
www.inputzero.io/2019/04/evernote-cve-2019-10038.htmlnvdThird Party Advisory
drive.google.com/file/d/1cmWixK1vAh7oZ2y3Y3ZtVeSoTRp8c1Ts/viewnvdBroken Link

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.001
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000