CVEvulnerability
CVE-2020-27951
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2021-04-02
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Description
This issue was addressed with improved checks. This issue is fixed in watchOS 6.3, iOS 12.5, iOS 14.3 and iPadOS 14.3, watchOS 7.2. Unauthorized code execution may lead to an authentication policy violation.
Affected configurations
• apple ipados (< 14.3)
• apple iphone os (< 12.5)
• apple iphone os (>= 14.0 < 14.3)
• apple watchos (>= 6.0 < 6.3)
• apple watchos (>= 7.0 < 7.2)
References
- https://support.apple.com/en-us/HT212003 Vendor Advisory
- https://support.apple.com/en-us/HT212004 Vendor Advisory
- https://support.apple.com/en-us/HT212006 Vendor Advisory
- https://support.apple.com/en-us/HT212009 Vendor Advisory
- https://support.apple.com/en-us/HT212003 Vendor Advisory
- https://support.apple.com/en-us/HT212004 Vendor Advisory
- https://support.apple.com/en-us/HT212006 Vendor Advisory
- https://support.apple.com/en-us/HT212009 Vendor Advisory