CVE-2020-27918

ALTO 7.8CVE-2020-27918 · Published 08/12/2020 · updated 17/06/2026

En resumen

CVE-2020-27918 es una vulnerabilidad ALTO (CVSS 7.8) que afecta a icloud (apple), itunes (apple), safari (apple).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.4%, mayor que el 72.9% de las vulnerabilidades.
Solución: actualizar a 11.5, 12.11, 14.0.1, 2.30.6 o posterior.

Package	Affected versions	Patched versions
icloud apple	`< 11.5`	`11.5`
itunes apple	`< 12.11`	`12.11`
safari apple	`< 14.0.1`	`14.0.1`
webkitgtk+ webkitgtk	`< 2.30.6`	`2.30.6`

Description

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 14.2 and iPadOS 14.2, iCloud for Windows 11.5, Safari 14.0.1, tvOS 14.2, iTunes 12.11 for Windows. Processing maliciously crafted web content may lead to arbitrary code execution.

References

seclists.org/fulldisclosure/2020/Dec/32 · Mailing List
openwall.com/lists/oss-security/2021/03/22/1 · Mailing List
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EQ3U3VBSOJB46WCO66TEWE5OAXLTU3YW
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JN6ZOD62CTO54CHTMJTHVEF6R2Y532TJ
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L3L6ZZOU5JS7E3RFYGLP7UFLXCG7TNLU
security.gentoo.org/glsa/202104-03 · Third Party Advisory
support.apple.com/en-us/HT211928 · Vendor Advisory
support.apple.com/en-us/HT211929 · Vendor Advisory
support.apple.com/en-us/HT211930 · Vendor Advisory
support.apple.com/en-us/HT211931 · Vendor Advisory

Más vulnerabilidades de icloud

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free