CVE-2020-27950: medium-severity vulnerability in Apple macOS
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Prioritize patching. It under exploitation confirmed by CISA and has a public proof of concept.
Apply updates per vendor instructions.
A memory initialization flaw allows malicious apps to read sensitive kernel memory that should be hidden. This could expose passwords, encryption keys, or other confidential data stored in the system.
Improper initialization of memory regions (CWE-665) permits a local malicious application to disclose kernel memory contents without proper access controls. The vulnerability requires the attacker to execute code on the target device; successful exploitation may leak sensitive kernel data including cryptographic material or process information.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.