{"vulnerability": "cve-2020-9839", "sightings": [{"uuid": "a354090e-66ea-40ab-8532-7c8ea57fc3c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-9839", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:44.000000Z"}, {"uuid": "566c61b0-e277-4a2e-b005-a604302e9710", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-9839", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:32.000000Z"}, {"uuid": "8fac05b3-72ff-4fa2-b4c4-98c76f84ded7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-9839", "type": "seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "content": "", "creation_timestamp": "2025-08-31T03:01:07.000000Z"}, {"uuid": "2dabddf9-d5a2-49cb-afd1-94aed75a7234", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-9839", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/local/cfprefsd_race_condition.rb", "content": "", "creation_timestamp": "2020-09-04T21:04:03.000000Z"}, {"uuid": "ed09251c-b26a-44d7-b5c0-465599973570", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-9839", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/1712", "content": "CVE-2020-9839:\nmacOS <10.15.4 cfprefsd Arbitrary File Write/Local Privilege Escalation (PoC)\nhttps://packetstormsecurity.com/files/159084/cfprefsd_race_condition.rb.txt", "creation_timestamp": "2020-09-08T11:12:01.000000Z"}, {"uuid": "5f6e435c-f0b3-4eee-b53d-d7a01f216721", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-9839", "type": "seen", "source": "https://t.me/cissp/1801", "content": "Red team:\n1. PowerShell obfuscation script to bypass AMSI and commercial antivirus solutions\nhttps://github.com/tokyoneon/Chimera\n\n2. JavaScript Engine Fuzzing and Exploitation Reading List\nhttps://zon8.re/posts/javascript-engine-fuzzing-and-exploitation-reading-list/\n\n3. WSUS Attacks. Part 1 - Introducing PyWSUS\nhttps://www.gosecure.net/blog/2020/09/03/wsus-attacks-part-1-introducing-pywsus/\n\n4.CVE-2020-9839:\nmacOS <10.15.4 cfprefsd Arbitrary File Write/Local Privilege Escalation (PoC)\nhttps://packetstormsecurity.com/files/159084/cfprefsd_race_condition.rb.txt\n\n5.CVE-2020-15704:\nUbuntu Desktop 20.04 - A local non-root attacker could exploit the MODPROBE_OPTIONS environment variable\nto read arbitrary root files\nhttps://www.synacktiv.com/en/publications/ubuntu-ppps-cve-2020-15704-wrap-up.html\n\n6.Simple Bugs With Complex Exploits (PoCs)\n// This post explores Project Zero Issue 2046, a seemingly unexploitable and simple bug that turns out to be exploitable in a very complex manner...\nhttps://www.elttam.com/blog/simple-bugs-with-complex-exploits/#content\n\n7.Maltego <4.2.12 XXE Analysis (CVE-2020-24656)\nhttps://www.hackersforchange.com/post/maltego-cve-2020-24656-analysis\n\n8.CVE-2020-9715: \nExploiting a Use-After-Free in Adobe Reader (PoC)\nhttps://www.zerodayinitiative.com/blog/2020/9/2/cve-2020-9715-exploiting-a-use-after-free-in-adobe-reader", "creation_timestamp": "2026-09-01T17:01:09.714855Z"}, {"uuid": "a8b28ab3-829b-43a7-b3e6-d7c0b3b7aec1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-9839", "type": "seen", "source": "https://t.me/cissp/1801", "content": "Red team:\n1. PowerShell obfuscation script to bypass AMSI and commercial antivirus solutions\nhttps://github.com/tokyoneon/Chimera\n\n2. JavaScript Engine Fuzzing and Exploitation Reading List\nhttps://zon8.re/posts/javascript-engine-fuzzing-and-exploitation-reading-list/\n\n3. WSUS Attacks. Part 1 - Introducing PyWSUS\nhttps://www.gosecure.net/blog/2020/09/03/wsus-attacks-part-1-introducing-pywsus/\n\n4.CVE-2020-9839:\nmacOS <10.15.4 cfprefsd Arbitrary File Write/Local Privilege Escalation (PoC)\nhttps://packetstormsecurity.com/files/159084/cfprefsd_race_condition.rb.txt\n\n5.CVE-2020-15704:\nUbuntu Desktop 20.04 - A local non-root attacker could exploit the MODPROBE_OPTIONS environment variable\nto read arbitrary root files\nhttps://www.synacktiv.com/en/publications/ubuntu-ppps-cve-2020-15704-wrap-up.html\n\n6.Simple Bugs With Complex Exploits (PoCs)\n// This post explores Project Zero Issue 2046, a seemingly unexploitable and simple bug that turns out to be exploitable in a very complex manner...\nhttps://www.elttam.com/blog/simple-bugs-with-complex-exploits/#content\n\n7.Maltego <4.2.12 XXE Analysis (CVE-2020-24656)\nhttps://www.hackersforchange.com/post/maltego-cve-2020-24656-analysis\n\n8.CVE-2020-9715: \nExploiting a Use-After-Free in Adobe Reader (PoC)\nhttps://www.zerodayinitiative.com/blog/2020/9/2/cve-2020-9715-exploiting-a-use-after-free-in-adobe-reader", "creation_timestamp": "2026-09-02T01:04:59.524489Z"}]}