Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

René Kroka

#45922of 53,633
5.5Total CVSS
Vulnerabilities · 1
PT-2020-17759
5.5
2020-02-27
Apple · Macos Catalina · CVE-2020-3866
**Name of the Vulnerable Software and Affected Versions** macOS Catalina versions prior to 10.15.3 **Description** The issue allows an attacker to bypass Gatekeeper by searching for and opening a file from an attacker-controlled NFS mount. This was addressed with additional checks by Gatekeeper on files mounted through a network share. **Recommendations** For macOS Catalina versions prior to 10.15.3, update to macOS Catalina 10.15.3 to resolve the issue. As a temporary workaround, consider restricting access to NFS mounts from untrusted sources to minimize the risk of exploitation.