CVE-2020-9796 — Race Condition in Apple Macos

CWE-362 — Race Condition2 documents2 sources
Severity
7.0HIGHNVD
EPSS
0.0%
top 89.48%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Apple MacosApple MAC OS X
Timeline
PublishedOct 22
Latest updateMay 24

Description

A race condition was addressed with improved state handling. This issue is fixed in macOS Catalina 10.15.5. An application may be able to execute arbitrary code with kernel privileges.

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.0 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5apple/macosunspecified — macOS Catalina 10.15.5
▶NVDapple/mac_os_x< 10.15.5

🔴Vulnerability Details

1
GHSA
GHSA-q3g2-22xw-gvf8: A race condition was addressed with improved state handling↗2022-05-24
▶
CVE-2020-9796 — Race Condition in Apple Macos | cvebase