CVE-2020-9839

A race condition was addressed with improved state handling. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. An application may be able to gain elevated privileges.

Affected

Apple · iOS · macOS · tvOS · watchOS

CVSS v3.1 NVD

7.0 HIGHCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

5.1 MEDIUMAV:N/AC:H/Au:N/C:P/I:P/A:P

EPSS

3.67% chance of exploitation in the next 30 days, 90th percentile

Published

2020-06-09

Updated

2024-08-04

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/osx/local/cfprefsd_race_conditio…

Security advisories

• https://support.apple.com/HT211168
• https://support.apple.com/HT211170
• https://support.apple.com/HT211171
• https://support.apple.com/HT211175

References

• CVE Record
• NVD entry