CVE-2020-10015 in macOS

Summary

by MITRE • 04/03/2021

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, macOS Big Sur 11.0.1. An application may be able to execute arbitrary code with kernel privileges.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Reservation: 03/02/2020
• Disclosure: 04/03/2021
• Moderation: accepted
• Entry: VDB-166289
• CPE: ready
• CWE: CWE-787 (confirmed)
• CVSS: 7.8 (VulDB)
• EPSS: 0.01061
• KEV: no
• Activities: very low
• Sector: Chemical, Hospital, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-10015
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-10015
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-10015/