CVE-2020-9856

EPSS 1.4%

Vexday Risk Score

18Low

SSVC decision (CISA)

Attend

PoC available → attend closely

CVSS —EPSS 1.4%KEV nãoPoC —Nuclei —Metasploit simPatch —

Lifecycle

18 Mar 2020Metasploit module available

09 Jun 2020Published on NVD

Recommendation: Plan a near-term fix — a public PoC already exists.

This issue was addressed with improved checks. This issue is fixed in macOS Catalina 10.15.5. An application may be able to gain elevated privileges.

Affected products

Want to know if your infrastructure is exposed to this?

References