7.8
High
Exploited
CVE-2020-27932 Apple Multiple Products Type Confusion Vulnerability
Active exploitation observed
· CISA KEV catalogue
Required action
Apply updates per vendor instructions.
Ransomware campaigns
Not observed so far
Weakness
CWE-843
Description
A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave, iOS 14.2 and iPadOS 14.2, watchOS 5.3.9, macOS Catalina 10.15.7 Supplemental Update, macOS Catalina 10.15.7 Update. A malicious application may be able to execute arbitrary code with kernel privileges.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| watchOS 7.1 | earliest → < 7.1 | 7.1 |
| iOS and iPadOS 14.2 | earliest → < 14.2 | 14.2 |
| macOS 10.15 | earliest → < 10.15 | 10.15 |
References
- support.apple.com support.apple.com
- support.apple.com support.apple.com
- support.apple.com support.apple.com
- support.apple.com support.apple.com
- support.apple.com support.apple.com
- support.apple.com support.apple.com
- support.apple.com support.apple.com
- support.apple.com support.apple.com
- 20201215 APPLE-SA-2020-12-14-4 Additional information for APPLE-SA-2020-11-13-1 macOS Big Sur 11.0.1 seclists.org
- packetstormsecurity.com packetstormsecurity.com
Timeline
- Published
- Added to the KEV catalogue
- Last modified
Other CVEs of watchOS
The 1458 CVEs of watchOS →
CVE-2026-86972
A buffer overflow was addressed with improved size validation
7.8
High
CVE-2026-86964
A null pointer dereference was addressed with improved input validation
7.5
High
CVE-2026-113904
A use-after-free issue was addressed with improved memory management
4.3
Medium
CVE-2026-112682
An input validation issue was addressed with improved input validation
7.5
High