CERT-In Advisory
CIAD-2020-0075
Multiple Vulnerabilities in Apple macOS Catalina
Original Issue Date: November 10, 2020
Severity Rating: High
Software Affected
- Apple macOS Catalina versions 10.15.7 and prior
Overview
Multiple vulnerabilities have been reported in Apple macOS Catalina which could be exploited by an attacker to disclose sensitive information or execute arbitrary code on a targeted system.
Description
These vulnerabilities exist due to improper input validation, improper state handling and memory initialization issue in FontParser and Kernel components of macOS.
Successful exploitation of these vulnerabilities could allow the attacker to disclose kernel memory or execute arbitrary code on the targeted system.
Note: These vulnerabilities have been reported as being actively exploited in the wild.
Solution
Apply appropriate updates as mentioned in the Apple Security Updates
https://support.apple.com/en-us/HT201222
Vendor Information
Apple
https://support.apple.com/en-gb/HT211947
References
CyberSecurityHelp
https://www.cybersecurity-help.cz/vdb/SB2020110604
CVE Name
CVE-2020-27930
CVE-2020-27932
CVE-2020-27950
Disclaimer
The information provided herein is on "as is" basis, without warranty of any kind.
Contact Information
Email: info@cert-in.org.in Phone: +91-11-24368572
Postal address
Indian Computer Emergency Response Team (CERT-In)
Ministry of Electronics and Information Technology
Government of India
Electronics Niketan
6, CGO Complex, Lodhi Road,
New Delhi - 110 003
India
|