CVE-2020-27951

HIGH

7.8

Description

This issue was addressed with improved checks. This issue is fixed in watchOS 6.3, iOS 12.5, iOS 14.3 and iPadOS 14.3, watchOS 7.2. Unauthorized code execution may lead to an authentication policy violation.

CVE Details

CVSS v3.1 Score7.8

SeverityHIGH

CVSS VectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack VectorLOCAL

ComplexityLOW

Privileges RequiredNONE

User InteractionREQUIRED

Published4/2/2021

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

apple:ipadosapple:iphone_osapple:watchos

References

https://support.apple.com/en-us/HT212003(product-security@apple.com)

https://support.apple.com/en-us/HT212004(product-security@apple.com)

https://support.apple.com/en-us/HT212006(product-security@apple.com)

https://support.apple.com/en-us/HT212009(product-security@apple.com)

https://support.apple.com/en-us/HT212003(af854a3a-2127-422b-91ae-364da2661108)

https://support.apple.com/en-us/HT212004(af854a3a-2127-422b-91ae-364da2661108)

https://support.apple.com/en-us/HT212006(af854a3a-2127-422b-91ae-364da2661108)

https://support.apple.com/en-us/HT212009(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.