CVEvulnerability
CVE-2020-27904
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2020-12-08
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Description
A logic issue existed resulting in memory corruption. This was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1. An application may be able to execute arbitrary code with kernel privileges.
Affected configurations
• apple macos (< 11.0.1)
References
- http://seclists.org/fulldisclosure/2020/Dec/32 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2021/Feb/14 Mailing List, Third Party Advisory
- https://support.apple.com/en-us/HT211931 Vendor Advisory
- https://support.apple.com/kb/HT212147 Vendor Advisory
- http://seclists.org/fulldisclosure/2020/Dec/32 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2021/Feb/14 Mailing List, Third Party Advisory
- https://support.apple.com/en-us/HT211931 Vendor Advisory
- https://support.apple.com/kb/HT212147 Vendor Advisory