CVE-2020-9855

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.3%

exploitation probability

0.3%top 82% of all CVEs

observed exploitation

nono source reports it

A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Catalina 10.15.5. A local attacker may be able to elevate their privileges.

Affected products

Apple · macOS

References

https://support.apple.com/HT211170