Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2020-27920

EPSS 0.48% · P65
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2020-27920

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, macOS Big Sur 11.0.1, iOS 14.2 and iPadOS 14.2, watchOS 7.1, tvOS 14.2. Processing maliciously crafted web content may lead to code execution.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
libxml2 资源管理错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
libxml2是一款使用C语言编写的用于解析XML文档的函数库。 libxml2 存在安全漏洞,处理恶意制作的Web内容可能导致代码执行。以下产品和版本受到影响:macOS Mojave 10.14.6,macOS Catalina 10.15.7
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
ApplewatchOS unspecified ~ 7.1 -
AppleiOS and iPadOS unspecified ~ 14.2 -
AppletvOS unspecified ~ 14.2 -
ApplemacOS unspecified ~ 11.0 -
ApplemacOS unspecified ~ 11.1 -

II. Public POCs for CVE-2020-27920

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2020-27920

登录查看更多情报信息。

Same Patch Batch · Apple · 2021-04-02 · 130 CVEs total

CVE-2020-29614Apple Model I/O 安全漏洞
CVE-2020-27939Apple macOS Big Sur 安全漏洞
CVE-2020-27941Apple macOS 安全漏洞
CVE-2020-27943Apple FontParser 缓冲区错误漏洞
CVE-2020-27938Apple Power Management 安全漏洞
CVE-2020-27945Apple CFNetwork Cache 输入验证错误漏洞
CVE-2020-27944Apple macOS 缓冲区错误漏洞
CVE-2020-27947Apple macOS 缓冲区错误漏洞
CVE-2020-27946Apple FontParser 信息泄露漏洞
CVE-2020-27951Apple iOS 安全漏洞
CVE-2020-27952Apple macOS 缓冲区错误漏洞
CVE-2020-27948Apple CoreAudio 缓冲区错误漏洞
CVE-2020-29612Apple macOS 缓冲区错误漏洞
CVE-2020-27949Apple Kernel 安全漏洞
CVE-2020-29610Apple macOS 缓冲区错误漏洞
CVE-2020-29608Apple FontParser 缓冲区错误漏洞
CVE-2020-29613Apple iOS 安全漏洞
CVE-2020-29639Apple iOS和Apple iPadOS 缓冲区错误漏洞
CVE-2020-29625Apple macOS Big Sur 安全漏洞
CVE-2020-29624Apple 多款产品缓冲区错误漏洞

Showing top 20 of 130 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2020-27920

No comments yet


Leave a comment