High severity7.8CISA KEVNVD Advisory· Published Dec 8, 2020· Updated Jun 17, 2026
CVE-2020-27930
CVE-2020-27930
Description
A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave, iOS 14.2 and iPadOS 14.2, watchOS 5.3.9, macOS Catalina 10.15.7 Supplemental Update, macOS Catalina 10.15.7 Update. Processing a maliciously crafted font may lead to arbitrary code execution.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
13cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*range: >=11.0,<11.0.1
- (no CPE)range: unspecified
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*range: <5.3.9
- (no CPE)range: 7.1, 6.2.9, 5.3.9
- (no CPE)range: unspecified
- Range: 10.15.7 Supplemental Update, 10.15.7 Update
- Range: 11.0.1
- Range: 2020-006
- Range: 12.4.9, 14.2
- Range: unspecified
Patches
Vulnerability mechanics
References
11- packetstormsecurity.com/files/161294/Apple-Safari-Remote-Code-Execution.htmlnvdThird Party AdvisoryVDB Entry
- seclists.org/fulldisclosure/2020/Dec/32nvdMailing ListThird Party Advisory
- support.apple.com/en-us/HT211928nvdVendor Advisory
- support.apple.com/en-us/HT211929nvdVendor Advisory
- support.apple.com/en-us/HT211931nvdVendor Advisory
- support.apple.com/en-us/HT211940nvdVendor Advisory
- support.apple.com/en-us/HT211944nvdVendor Advisory
- support.apple.com/en-us/HT211945nvdVendor Advisory
- support.apple.com/en-us/HT211946nvdVendor Advisory
- support.apple.com/en-us/HT211947nvdVendor Advisory
- www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource
News mentions
0No linked articles in our index yet.