Main
Vulnerability Database
Exploits
ID:4580 - Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in macOS - CVE-2020-9839
ID:4580 - Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in macOS - CVE-2020-9839
Published: September 6, 2020
Vulnerability identifier: #VU28314
Vulnerability risk: Low
CVE-ID: CVE-2020-9839
CWE-ID:
Exploitation vector: Local access
Vulnerable software:
macOS
macOS
Link to public exploit:
Vulnerability description
The vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a lack of proper locking when performing operations on an object within the handling of file permissions. An local user can gain elevated privileges on the target system.
Remediation
Install updates from vendor's website.