CVEvulnerability
CVE-2020-27918
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2020-12-08
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-416
Description
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 14.2 and iPadOS 14.2, iCloud for Windows 11.5, Safari 14.0.1, tvOS 14.2, iTunes 12.11 for Windows. Processing maliciously crafted web content may lead to arbitrary code execution.
Affected configurations
• apple icloud (< 11.5)
• apple itunes (< 12.11)
• apple safari (< 14.0.1)
• apple ipados (< 14.2)
• apple iphone os (< 14.2)
• apple macos (< 11.0.1)
• apple tvos (< 14.2)
• apple watchos (< 7.1)
• fedoraproject fedora 32
• fedoraproject fedora 33
• fedoraproject fedora 34
• debian debian linux 10.0
• webkitgtk webkitgtk\+ (< 2.30.6)
Related
Weakness · CWE (1)
- CWE-416 Use After Free weakness
References
- http://seclists.org/fulldisclosure/2020/Dec/32 Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2021/03/22/1 Mailing List, Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EQ3U3VBSOJB46WCO66TEWE5OAXLTU3YW/ lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JN6ZOD62CTO54CHTMJTHVEF6R2Y532TJ/ lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L3L6ZZOU5JS7E3RFYGLP7UFLXCG7TNLU/ lists.fedoraproject.org
- https://security.gentoo.org/glsa/202104-03 Third Party Advisory
- https://support.apple.com/en-us/HT211928 Vendor Advisory
- https://support.apple.com/en-us/HT211929 Vendor Advisory
- https://support.apple.com/en-us/HT211930 Vendor Advisory
- https://support.apple.com/en-us/HT211931 Vendor Advisory
- https://support.apple.com/en-us/HT211933 Vendor Advisory
- https://support.apple.com/en-us/HT211934 Vendor Advisory
- https://support.apple.com/en-us/HT211935 Vendor Advisory
- https://www.debian.org/security/2021/dsa-4877 Third Party Advisory
- http://seclists.org/fulldisclosure/2020/Dec/32 Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2021/03/22/1 Mailing List, Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EQ3U3VBSOJB46WCO66TEWE5OAXLTU3YW/ lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JN6ZOD62CTO54CHTMJTHVEF6R2Y532TJ/ lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L3L6ZZOU5JS7E3RFYGLP7UFLXCG7TNLU/ lists.fedoraproject.org
- https://security.gentoo.org/glsa/202104-03 Third Party Advisory
- https://support.apple.com/en-us/HT211928 Vendor Advisory
- https://support.apple.com/en-us/HT211929 Vendor Advisory
- https://support.apple.com/en-us/HT211930 Vendor Advisory
- https://support.apple.com/en-us/HT211931 Vendor Advisory
- https://support.apple.com/en-us/HT211933 Vendor Advisory
- https://support.apple.com/en-us/HT211934 Vendor Advisory
- https://support.apple.com/en-us/HT211935 Vendor Advisory
- https://www.debian.org/security/2021/dsa-4877 Third Party Advisory