CVE-2020-9796

EPSS 0.2%

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

22 Oct 2020Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

A race condition was addressed with improved state handling. This issue is fixed in macOS Catalina 10.15.5. An application may be able to execute arbitrary code with kernel privileges.

Affected products

Apple · macOS

References

https://support.apple.com/kb/HT211170