CVE-2020-27907: 
macOS vulnerability analysis and mitigation

A memory corruption vulnerability (CVE-2020-27907) was discovered in macOS affecting multiple versions including macOS Big Sur up to 11.0.1, Security Update 2020-001 Catalina, and Security Update 2020-007 Mojave. The vulnerability was disclosed and patched by Apple in December 2020 (Apple Advisory, Apple Security).

The vulnerability exists in the Intel Graphics Driver component of macOS. A memory corruption issue was identified that could be exploited through improper memory handling. The vulnerability has been assigned a CVSS v3.1 base score of 7.8 (HIGH) with the vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H (NVD).

If successfully exploited, this vulnerability allows a malicious application to execute arbitrary code with kernel privileges. This means an attacker could potentially gain complete control over the affected system with the highest level of access (Apple Advisory).

Apple has addressed this vulnerability by improving memory handling in the affected component. Users should update to macOS Big Sur 11.1, Security Update 2020-001 Catalina, or Security Update 2020-007 Mojave depending on their operating system version (Apple Advisory).