CVE-2020-9817

HIGH

macOS < 10.13.6 - Unauthenticated Privilege Escalation via Permission Validation Issue

Title source: llm

Description

A permissions issue existed. This issue was addressed with improved permission validation. This issue is fixed in macOS Catalina 10.15.5. A malicious application may be able to gain root privileges.

References (2)

Core 2

Core References

Release Notes, Vendor Advisory x_refsource_misc

https://support.apple.com/HT211170

Third Party Advisory vendor-advisory x_refsource_cisco

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-anyconnect-mac-priv-esc-VqST2nrT

Scores

CVSS v3 7.8

EPSS 0.0106

EPSS Percentile 60.2%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE

CWE-276

Status published

Products (3)

apple/mac_os_x 10.13.6 (12 CPE variants)

apple/mac_os_x 10.14.6 (9 CPE variants)

apple/mac_os_x 10.13 - 10.13.6

Published Jun 09, 2020

Tracked Since Feb 18, 2026