CVE-2020-9990

A race condition was addressed with additional validation. This issue is fixed in macOS Catalina 10.15.6. A malicious application may be able to execute arbitrary code with kernel privileges...

CVE-2020-9990

A race condition was addressed with additional validation. This issue is fixed in macOS Catalina 10.15.6. A malicious application may be able to execute arbitrary code with kernel privileges...

CVE-2020-9990

CVE-2020-9990 describes a race-condition in the Apple/macOS kernel path related to process_token_SetFence/Time-Of-Check-Time-Of-Use handling that could allow a locally authenticated attacker to execute arbitrary code with kernel privileges. The connected ZDI advisories identify the specific flaw ...