Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.5
CVE-2020-27950: Apple iOS, iPadOS, macOS, watchOS could leak kernel memory
CVE-2020-27950 · published 5 years ago · actively exploited
Summary
A flaw in the way these Apple operating systems start up memory can let a malicious app read parts of the system core that should be hidden. This could expose sensitive data or help an attacker gain deeper control of the device. Apply the latest software updates from Apple as soon as they are available to fix the issue.
What to do
- Update apple ipados to version 14.2 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| apple | multiple products | All versions |
| apple | ipados |
< 14.2 cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* |
| apple | iphone_os |
< 12.4.9 >= 14.0, < 14.2 cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* |
| apple | macos |
< 10.15.7 >= 11.0, < 11.0.1 cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* |
| apple | watchos |
< 5.3.9 >= 6.0, < 6.2.9 >= 7.0, < 7.1 cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:* |
Original advisory text
Apple Multiple Products Memory Initialization Vulnerability
Apple iOS, iPadOS, macOS, and watchOS contain a memory initialization vulnerability that may allow a malicious application to disclose kernel memory.
References
- http://packetstormsecurity.com/files/161296/XNU-Kernel-Mach-Message-Trailers-Mem... Third Party Advisory VDB Entry
- http://seclists.org/fulldisclosure/2020/Dec/32 Mailing List Third Party Advisory
- https://support.apple.com/en-us/HT211928 Vendor Advisory
- https://support.apple.com/en-us/HT211929 Vendor Advisory
- https://support.apple.com/en-us/HT211931 Vendor Advisory
- https://support.apple.com/en-us/HT211944 Vendor Advisory
- https://support.apple.com/en-us/HT211945 Vendor Advisory
- https://support.apple.com/en-us/HT211946 Vendor Advisory
- https://support.apple.com/en-us/HT211947 Vendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-... US Government Resource
- https://support.apple.com/en-us/HT211940 Vendor Advisory
Internet-facing
14 days
Internal
14 days
- Known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Severity
5.5
Medium
Known exploited
Listed in the CISA KEV catalogue - exploitation confirmed in the wild.
17%
chance of attack within 30 days
Type
CWE-665Improper Initialization
Timeline
Published8 Dec 2020
Updated4 Nov 2026
First seen6 Mar 2026
Track software like this
Free during beta