CVE-2020-27950
Medium · 5.5 CISA KEVCVSS
5.5
EPSS
16.5%
Published
Dec 8, 2020
CISA due date
May 3, 2022
The record
A memory initialization issue was addressed. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave, iOS 14.2 and iPadOS 14.2, watchOS 5.3.9, macOS Catalina 10.15.7 Supplemental Update, macOS Catalina 10.15.7 Update. A malicious application may be able to disclose kernel memory.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-87616 Improper initialization in Views in Google Chrome on on Windows prior to 153.0.8010.36… CWE-665
- CVE-2026-78940 Improper initialization in Network in Google Chrome prior to 152.0.7977.65 allowed a… CWE-665
- CVE-2026-12233 The PSA Protected Storage credential backend (subsys/net/lib/tls_credentials/tls_credenti… CWE-665
- CVE-2026-54777 CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET… CWE-665
- CVE-2026-54409 A malicious actor with access to the network and under certain conditions could exploit… CWE-665
- CVE-2026-54279 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. CWE-665
- GHSA-cmwh-pvxp-8882 DOMPurify: Permanent `ALLOWED_ATTR` pollution via `setConfig()` bypassing the hook… CWE-665
- CVE-2026-12539 Docker Sandboxes (sbx) blocks ICMP egress with an authorizer applied only at… CWE-665