Register for the AI for Security Summit: Join Figma, Perplexity & Wiz

CVE-2020-27914
macOS vulnerability analysis and mitigation

Overview

CVE-2020-27914 is a memory corruption vulnerability discovered in AMD components of macOS systems. The vulnerability was disclosed and patched by Apple in December 2020 as part of macOS Big Sur 11.1, Security Update 2020-001 Catalina, and Security Update 2020-007 Mojave releases. The vulnerability affects multiple versions of macOS including Mojave 10.14.6 and Catalina 10.15.7 (Apple Support).

Technical details

The vulnerability stems from a memory corruption issue in the AMD components that could allow malicious applications to execute arbitrary code with system privileges. The issue was addressed by Apple through improved input validation mechanisms (Apple Support).

Impact

If exploited, this vulnerability allows a malicious application to execute arbitrary code with system privileges, effectively gaining complete control over the affected system (Apple Support).

Exploitability

The vulnerability requires a malicious application to be present on the system to exploit the weakness. The vulnerability was discovered by Yu Wang of Didi Research America (Apple Support).

Mitigation and workarounds

Apple has addressed this vulnerability by releasing security updates in macOS Big Sur 11.1, Security Update 2020-001 Catalina, and Security Update 2020-007 Mojave. Users are advised to update their systems to the latest version to receive the patch (Apple Support).

Additional resources


SourceThis report was generated using AI

Related macOS vulnerabilities:

CVE ID

Severity

Score

Technologies

Component name

CISA KEV exploit

Has fix

Published date

CVE-2026-86917HIGH7.8
  • macOS logomacOS
  • Kernel
NoYesSep 14, 2026
CVE-2026-86924MEDIUM5.5
  • macOS logomacOS
  • MobileAccessoryUpdater
NoYesSep 14, 2026
CVE-2026-86910MEDIUM5.5
  • macOS logomacOS
  • APFS
NoYesSep 14, 2026
CVE-2026-86902MEDIUM5.5
  • macOS logomacOS
  • NSDocument
NoYesSep 14, 2026
CVE-2026-86891LOW3.5
  • macOS logomacOS
  • Core Bluetooth
NoYesSep 14, 2026

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management