The host is installed with Safari before 13.1.2 on Apple Mac OS X 10.13.6, 10.14.6 or 10.15.x before 10.15.6 and is prone to a privilege escalation vulnerability. A flaw is present in the application, which fails to properly handle a logic issue. Successful exploitation allows an attacker to change the origin of a frame for a download in Safari Reader mode.