AEGLIX vulnerability intelligence
CVE-2020-27950
MEDIUM · CVSS 5.5 · Analyzed
Published: 2020-12-08 · Updated: 2026-06-17 · Source: NVD
Vulnerability overview
A memory initialization issue was addressed. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave, iOS 14.2 and iPadOS 14.2, watchOS 5.3.9, macOS Catalina 10.15.7 Supplemental Update, macOS Catalina 10.15.7 Update. A malicious application may be able to disclose kernel memory.
Severity and scoring
- CVSS score
- 5.5 · MEDIUM
- CVSS version
- 3.1
- CVSS vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-665
CVSS measures technical severity; it does not establish whether this vulnerability is being exploited in your environment.
Known exploitation and remediation
Listed in CISA’s Known Exploited Vulnerabilities catalog.
- Affected product
- Apple · Multiple Products
- Added to catalog
- 2021-11-03
- Required action
- Apply updates per vendor instructions.
- CISA remediation due date
- 2022-05-03
CISA deadlines apply to the organizations covered by its directives. Confirm your own remediation requirements.
Verify affected versions and patch availability in the vendor advisory before making changes.
Affected products and versions
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
Before (exclusive): 14.2
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
Before (exclusive): 12.4.9
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
From (inclusive): 14.0
Before (exclusive): 14.2
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Before (exclusive): 10.15.7
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
From (inclusive): 11.0
Before (exclusive): 11.0.1
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*
Before (exclusive): 5.3.9
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*
From (inclusive): 6.0
Before (exclusive): 6.2.9
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*
From (inclusive): 7.0
Before (exclusive): 7.1
These are NVD CPE applicability entries. Some products depend on configuration conditions; consult the official record to confirm applicability.
Advisories and references
- http://packetstormsecurity.com/files/161296/XNU-Kernel-Mach-Message-Trailers-Memory-Disclosure.html
Third Party Advisory · VDB Entry
- http://seclists.org/fulldisclosure/2020/Dec/32
Mailing List · Third Party Advisory
- https://support.apple.com/en-us/HT211928
Vendor Advisory
- https://support.apple.com/en-us/HT211929
Vendor Advisory
- https://support.apple.com/en-us/HT211931
Vendor Advisory
- https://support.apple.com/en-us/HT211940
Vendor Advisory
- https://support.apple.com/en-us/HT211944
Vendor Advisory
- https://support.apple.com/en-us/HT211945
Vendor Advisory
- https://support.apple.com/en-us/HT211946
Vendor Advisory
- https://support.apple.com/en-us/HT211947
Vendor Advisory
- http://packetstormsecurity.com/files/161296/XNU-Kernel-Mach-Message-Trailers-Memory-Disclosure.html
Third Party Advisory · VDB Entry
- http://seclists.org/fulldisclosure/2020/Dec/32
Mailing List · Third Party Advisory
- https://support.apple.com/en-us/HT211928
Vendor Advisory
- https://support.apple.com/en-us/HT211929
Vendor Advisory
- https://support.apple.com/en-us/HT211931
Vendor Advisory
- https://support.apple.com/en-us/HT211940
Vendor Advisory
- https://support.apple.com/en-us/HT211944
Vendor Advisory
- https://support.apple.com/en-us/HT211945
Vendor Advisory
- https://support.apple.com/en-us/HT211946
Vendor Advisory
- https://support.apple.com/en-us/HT211947
Vendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-27950
US Government Resource