CVE Feed

    Dashboard / CVE / CVE-2020-14977

    CVE-2020-14977

    An issue was discovered in F-Secure SAFE 17.7 on macOS. The XPC services use the PID to identify the connecting client, which allows an attacker to perform a PID reuse attack and connect to a privileged XPC service, and execute privileged commands on the system. NOTE: the attacker needs to execute code on an already compromised machine.

    Published:Jun 23, 2020
    Last Modified:Nov 21, 2024
    EPS:Jun 23, 2020
    EPSS Score:0.00802
    CVSS Score:8.1

    Affected Products

    Vendor
    F-secure
    Product
    Safe

    Exploits

    https://theevilbit.github.io/posts/https://theevilbit.github.io/posts/

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2022-47524 (CVSS 5.4) — F-Secure SAFE Browser 19.1 before 19.2 for Android allows an IDN homograph attack.…
    CVE-2022-38164 (CVSS 6.5) — A vulnerability affecting F-Secure SAFE browser for Android and iOS was discovered. A maliciously crafted webs…
    CVE-2022-38163 (CVSS 3.5) — A Drag and Drop spoof vulnerability was discovered in F-Secure SAFE Browser for Android and iOS version 19.0 a…
    CVE-2022-28873 (CVSS 4.3) — A vulnerability affecting F-Secure SAFE browser was discovered. An attacker can potentially exploit Javascript…
    CVE-2022-28872 (CVSS 4.3) — A vulnerability affecting F-Secure SAFE browser was discovered. A maliciously crafted website could make a phi…
    CVE-2022-28869 (CVSS 4.3) — A vulnerability affecting F-Secure SAFE browser was discovered. A maliciously crafted website could make a phi…
    CVE-2022-28868 (CVSS 4.3) — An Address bar spoofing vulnerability was discovered in Safe Browser for Android. When user clicks on a specia…
    CVE-2022-28870 (CVSS 4.3) — A vulnerability affecting F-Secure SAFE browser was discovered. A maliciously crafted website could make a phi…
    CVE-2021-44751 (CVSS 4.3) — A vulnerability affecting F-Secure SAFE browser was discovered. A maliciously crafted website attached with US…
    CVE-2021-44749 (CVSS 5.5) — A vulnerability affecting F-Secure SAFE browser protection was discovered improper URL handling can be trigger…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High