medium6.3
CVE-2020-10014
A parsing issue in the handling of directory paths was addressed with improved path validation.
Impact
A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Big Sur 11.0.1. A malicious application may be able to break out of its sandbox.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Mac Os X | from 10.14 before 10.14.6 from 10.15 before 10.15.7 Versions 10.14.6, 10.15.7 |
| Apple | Macos | before 11.0.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://seclists.org/fulldisclosure/2020/Dec/26
- http://seclists.org/fulldisclosure/2020/Dec/32
- https://support.apple.com/en-us/HT211931
- https://support.apple.com/kb/HT212011
- http://seclists.org/fulldisclosure/2020/Dec/26
- http://seclists.org/fulldisclosure/2020/Dec/32
- https://support.apple.com/en-us/HT211931
- https://support.apple.com/kb/HT212011