Logic Flaw in Apple Products Exposes Users to Code Execution Risks
CVE-2020-27942

7.8HIGH

Key Information:

Vendor

Apple
Status
Security Update - Catalina
Vendor
CVE Published:
8 September 2021

What is CVE-2020-27942?

A logic flaw in certain versions of macOS has been identified, which is linked to improper state management. This vulnerability allows processing of a specially crafted font file, potentially enabling an attacker to execute arbitrary code on the affected system. Users are advised to update to Security Update 2021-002 for Catalina and Security Update 2021-003 for Mojave to mitigate the risk associated with this vulnerability. Ensuring that your system is up to date is crucial for maintaining security and protecting against exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Security Update - Catalina < 2021

References

https://support.apple.com/en-us/HT212326
x_refsource_MISC
https://support.apple.com/en-us/HT212327
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.