CVE-2020-3835

EPSS 0.3%

Vexday Risk Score

3Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS —EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

27 fev 2020Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Catalina 10.15.3. A malicious application may be able to access restricted files.

Produtos afetados

Apple · macOS

Referências

https://support.apple.com/HT210919