CVE-2020-27904

Опубликовано: 08 дек. 2020

Источник: nvd

CVSS3: 7.8

CVSS2: 9.3

EPSS Низкий

Описание

A logic issue existed resulting in memory corruption. This was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1. An application may be able to execute arbitrary code with kernel privileges.

Ссылки

http://seclists.org/fulldisclosure/2020/Dec/32
Mailing List
Third Party Advisory
http://seclists.org/fulldisclosure/2021/Feb/14
Mailing List
Third Party Advisory
https://support.apple.com/en-us/HT211931
Vendor Advisory
https://support.apple.com/kb/HT212147
Vendor Advisory
http://seclists.org/fulldisclosure/2020/Dec/32
Mailing List
Third Party Advisory
http://seclists.org/fulldisclosure/2021/Feb/14
Mailing List
Third Party Advisory
https://support.apple.com/en-us/HT211931
Vendor Advisory
https://support.apple.com/kb/HT212147
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Версия до 11.0.1 (исключая)

EPSS

Процентиль: 90%

0.05299

Низкий

7.8 High

CVSS3

9.3 Critical

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-9mg9-93fp-h68f

github

больше 3 лет назад