Live › vulnerability › CVE-2020-27950
Go to dashboardApple iOS, iPadOS, macOS and watchOS have a memory initialization flaw that lets a malicious app read kernel memory. Reading kernel memory can leak data useful for escaping app sandboxes and defeating kernel protections.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Apple Multiple Products | vendor | – | – |
Check the device OS version in Settings > General > About (iOS/iPadOS) or About This Mac (macOS) and compare it with the patched release listed in Apple's security notes.
Update iOS, iPadOS, macOS and watchOS to the latest versions per Apple's vendor instructions.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A memory initialization issue was addressed. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave, iOS 14.2 and iPadOS 14.2, watchOS 5.3.9, macOS Catalina 10.15.7 Supplemental Update, macOS Catalina 10.15.7 Update. A malicious application may be able to disclose kernel memory.
This page as .md · .json · in your agent: get_signal("CVE-2020-27950")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.