CVE-2020-27932: Apple Multiple Products Type Confusion Vulnerability
First published: Thu Nov 05 2020(Updated: )
A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave, iOS 14.2 and iPadOS 14.2, watchOS 5.3.9, macOS Catalina 10.15.7 Supplemental Update, macOS Catalina 10.15.7 Update. A malicious application may be able to execute arbitrary code with kernel privileges.
Credit: Google Project Zero Google Project Zero Google Project Zero Google Project Zero Google Project Zero Google Project Zero Google Project Zero Google Project Zero product-security@apple.com product-security@apple.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apple macOS Big Sur | <11.0.1 | 11.0.1 |
| Apple macOS Catalina Supplemental Update | <10.15.7 | 10.15.7 |
| Apple macOS Catalina Update | <10.15.7 | 10.15.7 |
| Apple High Sierra | ||
| Apple Mojave | ||
| Apple watchOS | <5.3.9 | 5.3.9 |
| Apple watchOS | <6.2.9 | 6.2.9 |
| Apple watchOS | <7.1 | 7.1 |
| Apple iOS | <12.4.9 | 12.4.9 |
| Apple Multiple Products | ||
| Apple iOS | <14.2 | 14.2 |
| Apple iPadOS | <14.2 | 14.2 |
| Apple Icloud Windows | <11.5 | |
| Apple Itunes Windows | <12.11 | |
| Apple iPadOS | <14.2 | |
| Apple iPhone OS | <12.4.9 | |
| Apple iPhone OS | >=14.0<14.2 | |
| Apple Mac OS X | <10.15.7 | |
| Apple macOS | >=11.0<11.0.1 | |
| Apple watchOS | <5.3.9 | |
| Apple watchOS | >=6.0<6.2.9 | |
| Apple watchOS | >=7.0<7.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://support.apple.com/en-us/HT211931 (Advisory)
- https://support.apple.com/en-us/HT211947 (Advisory)
- https://support.apple.com/en-us/HT211946 (Advisory)
- https://support.apple.com/en-us/HT211945 (Advisory)
- https://support.apple.com/en-us/HT211944 (Advisory)
- https://support.apple.com/en-us/HT211928 (Advisory)
- https://support.apple.com/en-us/HT211940 (Advisory)
- https://support.apple.com/en-us/HT211929 (Advisory)
- http://packetstormsecurity.com/files/161295/XNU-Kernel-Turnstiles-Type-Confusion.html
- http://seclists.org/fulldisclosure/2020/Dec/32
- https://nvd.nist.gov/vuln/detail/CVE-2020-27932
Parent vulnerabilities
(Appears in the following advisories)
Peer vulnerabilities
(Found alongside the following vulnerabilities)
- CVE-2020-27914
- CVE-2020-27915
- CVE-2020-27903
- CVE-2020-27910
- CVE-2020-27916
- CVE-2020-9943
- CVE-2020-9944
- CVE-2020-27906
- CVE-2020-27945
- CVE-2020-27908
- CVE-2020-27909
- CVE-2020-9960
- CVE-2020-10017
- CVE-2020-9949
- CVE-2020-9897
- CVE-2020-9883
- CVE-2020-10003
- CVE-2020-27922
- CVE-2020-9999
- CVE-2020-27937
- CVE-2020-9965
- CVE-2020-9966
- CVE-2020-27894
- CVE-2020-36615
- CVE-2021-1790
- CVE-2021-1775
- CVE-2020-29629
- CVE-2020-27942
- CVE-2020-9962
- CVE-2020-27952
- CVE-2020-9956
- CVE-2020-27931
- CVE-2020-27930
- CVE-2020-27927
- CVE-2020-29639
- CVE-2020-10002
- CVE-2020-9978
- CVE-2020-9955
- CVE-2020-27924
- CVE-2020-27912
- CVE-2020-27923
- CVE-2020-9876
- CVE-2020-10015
- CVE-2020-27897
- CVE-2020-27907
- CVE-2020-27919
- CVE-2020-9967
- CVE-2020-9975
- CVE-2020-27921
- CVE-2020-27904
- CVE-2019-14899
- CVE-2020-27950
- CVE-2020-9974
- CVE-2020-10016
- CVE-2020-27932
- CVE-2020-27917
- CVE-2020-27920
- CVE-2020-27911
- CVE-2020-9971
- CVE-2020-10014
- CVE-2020-10010
- CVE-2020-9941
- CVE-2020-9988
- CVE-2020-9989
- CVE-2020-10011
- CVE-2020-13524
- CVE-2020-10004
- CVE-2020-9996
- CVE-2020-27901
- CVE-2020-27900
- CVE-2019-20838
- CVE-2020-14155
- CVE-2020-10007
- CVE-2020-27896
- CVE-2020-9963
- CVE-2020-10012
- CVE-2020-10663
- CVE-2020-9945
- CVE-2020-9977
- CVE-2020-9942
- CVE-2020-9987
- CVE-2021-1803
- CVE-2020-9969
- CVE-2020-27893
- CVE-2021-1755
- CVE-2020-10005
- CVE-2020-9991
- CVE-2020-9849
- CVE-2020-15358
- CVE-2020-13631
- CVE-2020-13434
- CVE-2020-13435
- CVE-2020-13630
- CVE-2020-27899
- CVE-2020-10009
- CVE-2020-10008
- CVE-2020-27918
- CVE-2020-9947
- CVE-2020-9950
- CVE-2020-27898
- CVE-2020-27935
- CVE-2020-10006
- CVE-2020-27905
- CVE-2020-27929
- CVE-2020-27925
- CVE-2020-27902
- CVE-2020-27926
Frequently Asked Questions
What is CVE-2020-27932?
CVE-2020-27932 is a type confusion vulnerability found in Apple iOS, iPadOS, macOS, and watchOS.
What is the risk of CVE-2020-27932?
CVE-2020-27932 has the potential to allow a malicious application to execute code with kernel privileges.
Which Apple products are affected by CVE-2020-27932?
Apple iOS, iPadOS, macOS, and watchOS are affected by CVE-2020-27932.
How can I fix CVE-2020-27932?
To fix CVE-2020-27932, it is recommended to update your Apple device to the latest available software version.
Where can I find more information about CVE-2020-27932?
You can find more information about CVE-2020-27932 on the official Apple support page.
- agent/type
- agent/first-publish-date
- collector/apple-support
- agent/software-canonical-lookup-request
- agent/title
- agent/severity
- agent/author
- agent/weakness
- agent/description
- collector/nvd-index
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- exploited/true
- collector/cisa-known-exploited
- source/CISA
- agent/software-canonical-lookup
- agent/references
- agent/tags
- collector/nvd-cve
- source/NVD
- vendor/apple
- canonical/apple macos big sur
- canonical/apple macos catalina supplemental update
- canonical/apple macos catalina update
- canonical/apple high sierra
- canonical/apple mojave
- canonical/apple watchos
- canonical/apple ios
- canonical/apple ipados
- canonical/apple icloud windows
- canonical/apple itunes windows
- canonical/apple iphone os
- version/apple iphone os/14.0
- canonical/apple mac os x
- canonical/apple macos
- version/apple macos/11.0
- version/apple watchos/6.0
- version/apple watchos/7.0
- canonical/apple multiple products