First published: Thu Nov 05 2020(Updated: )
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 14.2 and iPadOS 14.2, iCloud for Windows 11.5, Safari 14.0.1, tvOS 14.2, iTunes 12.11 for Windows. Processing maliciously crafted web content may lead to arbitrary code execution.
Credit: Liu Long Ant Security Lightan anonymous researcher cc Trend Micro Zero Day InitiativeMarcin 'Icewall' Noga Cisco Talos product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
Apple macOS | <11.0.1 | 11.0.1 |
tvOS | <14.2 | 14.2 |
Apple iOS, iPadOS, and watchOS | <7.1 | 7.1 |
Apple iCloud | <11.5 | 11.5 |
iTunes | <12.11 | 12.11 |
Safari | <14.0.1 | 14.0.1 |
Apple iOS and iPadOS | <14.2 | 14.2 |
Apple iOS, iPadOS, and macOS | <14.2 | 14.2 |
iCloud for Windows | <11.5 | |
iTunes | <12.11 | |
Safari | <14.0.1 | |
Apple iOS, iPadOS, and macOS | <14.2 | |
iPhone OS | <14.2 | |
macOS | <11.0.1 | |
tvOS | <14.2 | |
Apple iOS, iPadOS, and watchOS | <7.1 | |
Red Hat Fedora | =32 | |
Red Hat Fedora | =33 | |
Red Hat Fedora | =34 | |
Debian Linux | =10.0 | |
WebKitGTK+ | <2.30.6 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Appears in the following advisories)
(Found alongside the following vulnerabilities)
CVE-2020-27918 is a use after free vulnerability in WebKit.
Apple iCloud for Windows version 11.5 is affected by CVE-2020-27918.
Yes, Apple iTunes for Windows version up to 12.11 is affected by CVE-2020-27918.
The severity of CVE-2020-27918 is not specified in the vulnerability report.
To fix CVE-2020-27918, update to the latest version of the affected software as per the vendor's instructions.