
Cloud Vulnerability DB
A community-led vulnerabilities database
CVE-2020-27914 is a memory corruption vulnerability discovered in AMD components of macOS systems. The vulnerability was disclosed and patched by Apple in December 2020 as part of macOS Big Sur 11.1, Security Update 2020-001 Catalina, and Security Update 2020-007 Mojave releases. The vulnerability affects multiple versions of macOS including Mojave 10.14.6 and Catalina 10.15.7 (Apple Support).
The vulnerability stems from a memory corruption issue in the AMD components that could allow malicious applications to execute arbitrary code with system privileges. The issue was addressed by Apple through improved input validation mechanisms (Apple Support).
If exploited, this vulnerability allows a malicious application to execute arbitrary code with system privileges, effectively gaining complete control over the affected system (Apple Support).
The vulnerability requires a malicious application to be present on the system to exploit the weakness. The vulnerability was discovered by Yu Wang of Didi Research America (Apple Support).
Apple has addressed this vulnerability by releasing security updates in macOS Big Sur 11.1, Security Update 2020-001 Catalina, and Security Update 2020-007 Mojave. Users are advised to update their systems to the latest version to receive the patch (Apple Support).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."