
Cloud Vulnerability DB
A community-led vulnerabilities database
CVE-2020-9975 is a use-after-free vulnerability discovered in Apple's kernel that affects multiple Apple operating systems including macOS Big Sur 11.0.1, tvOS 14.0, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, watchOS 7.0, iOS 14.0 and iPadOS 14.0. The vulnerability was discovered by Tielei Wang of Pangu Lab and was fixed by Apple through improved memory management (Apple Support, CVE Mitre).
The vulnerability is a use-after-free issue in the kernel that was addressed with improved memory management. This type of vulnerability occurs when a program continues to use a pointer after it has been freed, which can lead to arbitrary code execution (Apple Support).
If exploited, this vulnerability allows a malicious application to execute arbitrary code with kernel privileges, effectively gaining the highest level of system access (CVE Mitre, Apple Support).
Apple has addressed this vulnerability by releasing security updates for affected systems. Users should update to macOS Big Sur 11.0.1, tvOS 14.0, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, watchOS 7.0, iOS 14.0 or iPadOS 14.0 to mitigate this vulnerability (Apple Support).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."