PT-2020-20809
CVE-2020-9856
·
Published
2020-05-28
·
Updated
2022-03-31
Description by
CVSS 3.1
5.3
MediumMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions
macOS versions prior to 10.15.5
Description
The issue allows an application to potentially gain elevated privileges due to a heap-based buffer overflow vulnerability in the Core Virtual Machine Service. This vulnerability was demonstrated in a real-world scenario at Pwn2Own.
Recommendations
For versions prior to 10.15.5, update to macOS Catalina 10.15.5 to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾