CVE-2020-27932

Published: 08/12/2020 Updated: 11/02/2021

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8

VMScore: 829

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave, iOS 14.2 and iPadOS 14.2, watchOS 5.3.9, macOS Catalina 10.15.7 Supplemental Update, macOS Catalina 10.15.7 Update. A malicious application may be able to execute arbitrary code with kernel privileges.

Vulnerable Product	Search on Vulmon	Subscribe to Product
apple mac os x
apple itunes
apple icloud
apple ipados
apple macos
apple watchos
apple iphone os

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-2020-11-05-2 iOS 1249 iOS 1249 is now available and address the following issues Information about the security content is also available at supportapplecom/HT211940 FaceTime Available for: iPhone 5s, iPhone 6 and 6 Plus, iPad Air, iPad mini 2 and 3, iPod touch (6th generat ...

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-2020-11-05-1 iOS 142 and iPadOS 142 iOS 142 and iPadOS 142 are now available and address the following issues Information about the security content is also available at supportapplecom/HT211929 Audio Available for: iPhone 6s and later, iPod touch 7th generation, iPad Air 2 ...

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-2020-12-14-4 Additional information for APPLE-SA-2020-11-13-1 macOS Big Sur 1101 macOS Big Sur 1101 addresses the following issues Information about the security content is also available at supportapplecom/HT211931 AMD Available for: Mac Pro (2013 and later), MacBook Air ( ...

Apple emits iOS, iPadOS, watchOS, macOS patches to fix three hijack-my-device flaws exploited in the wild

The Register • Thomas Claburn in San Francisco • 05 Nov 2020

Trio of bugs reported by Google Project Zero, plenty of other flaws addressed Here's a neat exploit to trick someone into inadvertently emailing their files to you from their Mac, iPhone via Safari

Apple on Thursday issued security updates for iOS, iPadOS, watchOS, and macOS that address three holes reported by Google's Project Zero bug hunters among exploitable flaws found by others. Installing the latest software for your iPhone, iPad and so on will address these programming blunders. The iPhone giant's security bulletins note that the three flaws discovered and reported by Project Zero – CVE-2020-27930 (remote-code execution), CVE-2020-27950 (kernel memory leak), and CVE-2020-27932 (k...

CVE-2020-27932

Vulnerability Summary

Vulnerability Trend

Mailing Lists

Recent Articles

References

Vulmon Search

About

Products

Connect