CVE-2020-29622

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.1%

exploitation probability

1.1%top 36% of all CVEs

observed exploitation

nono source reports it

A race condition was addressed with additional validation. This issue is fixed in Security Update 2021-005 Catalina. Mounting a maliciously crafted NFS network share may lead to arbitrary code execution with system privileges.

Affected products

Apple · Security Update - Catalina

References

https://support.apple.com/en-us/HT212805