Home > Vulnerability Database > CVE-2020-27918

Mend.io Vulnerability Database

CVE-2020-27918

Date: December 8, 2020

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 14.2 and iPadOS 14.2, iCloud for Windows 11.5, Safari 14.0.1, tvOS 14.2, iTunes 12.11 for Windows. Processing maliciously crafted web content may lead to arbitrary code execution.

Severity Score

7.8

Related Resources (20)

Url: https://support.apple.com/en-us/HT211934

Url: https://support.apple.com/en-us/HT211933

Url: https://nvd.nist.gov/vuln/detail/CVE-2020-27918

Url: https://support.apple.com/en-us/HT211935

Url: https://security.alpinelinux.org/vuln/CVE-2020-27918

Url: https://support.apple.com/en-us/HT211929

Url: http://seclists.org/fulldisclosure/2020/Dec/32

Url: http://www.openwall.com/lists/oss-security/2021/03/22/1

Url: https://support.apple.com/en-us/HT211928

Url: https://security.gentoo.org/glsa/202104-03

Url: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EQ3U3VBSOJB46WCO66TEWE5OAXLTU3YW/

Url: https://access.redhat.com/security/cve/CVE-2020-27918

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2020-27918

Url: https://security-tracker.debian.org/tracker/CVE-2020-27918

Url: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L3L6ZZOU5JS7E3RFYGLP7UFLXCG7TNLU/

Url: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JN6ZOD62CTO54CHTMJTHVEF6R2Y532TJ/

Url: https://support.apple.com/en-us/HT211930

Url: https://support.apple.com/en-us/HT211931

Url: https://www.debian.org/security/2021/dsa-4877

Url: https://www.mend.io/vulnerability-database/CVE-2020-27918

Severity Score

7.8

Weakness Type (CWE)

Use After Free

CWE-416

CVSS v3.1

Base Score:	7.8
Attack Vector (AV):	LOCAL
Attack Complexity (AC):	LOW
Privileges Required (PR):	NONE
User Interaction (UI):	REQUIRED
Scope (S):	UNCHANGED
Confidentiality (C):	HIGH
Integrity (I):	HIGH
Availability (A):	HIGH

CVSS v2

Base Score:	6.8
Access Vector (AV):	NETWORK
Access Complexity (AC):	MEDIUM
Authentication (AU):	NONE
Confidentiality (C):	PARTIAL
Integrity (I):	PARTIAL
Availability (A):	PARTIAL
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2020-27918

Date: December 8, 2020

Severity Score

Related Resources (20)

Severity Score

Weakness Type (CWE)

CVSS v3.1

CVSS v2

Do you need more information?