CVE-2020-14977

State: Published
Severity: Not scored
Published: Jun 23, 2020
Updated: Aug 4, 2024
Reserved: Jun 22, 2020

Description

An issue was discovered in F-Secure SAFE 17.7 on macOS. The XPC services use the PID to identify the connecting client, which allows an attacker to perform a PID reuse attack and connect to a privileged XPC service, and execute privileged commands on the system. NOTE: the attacker needs to execute code on an already compromised machine.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

https://www.f-secure.com/en/home/products/safe
https://www.f-secure.com/en/business/programs/vulnerability-reward-program/hall-of-fame
https://theevilbit.github.io/posts/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.