CVE-2020-27901: 
macOS vulnerability analysis and mitigation

A logic issue was discovered in NSRemoteView component of macOS that could allow a sandboxed process to circumvent sandbox restrictions. This vulnerability, tracked as CVE-2020-27901, was addressed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, and Security Update 2020-007 Mojave released on December 14, 2020 (Apple Security).

The vulnerability stems from a logic issue in the NSRemoteView component that could allow sandbox escape. Apple addressed this security flaw by implementing improved restrictions to prevent unauthorized sandbox access (Apple Support).

If exploited, this vulnerability would allow a sandboxed process to bypass sandbox restrictions, potentially compromising the security boundaries put in place by macOS (Apple Security).

The vulnerability was discovered by Thijs Alkemade of Computest Research Division. No public exploits or active exploitation were reported at the time of disclosure (Apple Security).

Apple addressed this vulnerability by implementing improved restrictions in macOS Big Sur 11.1, Security Update 2020-001 Catalina, and Security Update 2020-007 Mojave. Users should update to these versions or later to protect against this vulnerability (Apple Security).