CVE-2020-27949

🗓️ 02 Apr 2021 17:39:58Reported by appleType

cve🔗 web.nvd.nist.gov👁 80 Views🌐 WEB

Improved checks to prevent unauthorized actions, fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojav

Reporter	Title	Published	Views	Family All 13
GithubExploit	Exploit for CVE-2020-27949	14 Dec 202019:39	–	githubexploit
Apple	About the security content of macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave	14 Dec 202000:00	–	apple
Apple	About the security content of macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave - Apple Support	1 Feb 202106:39	–	apple
Circl	CVE-2020-27949	28 Dec 202023:39	–	circl
CNNVD	Apple Kernel Security Vulnerability	15 Dec 202000:00	–	cnnvd
Cvelist	CVE-2020-27949	2 Apr 202117:39	–	cvelist
EUVD	EUVD-2020-20442	7 Oct 202500:30	–	euvd
Gitee	Exploit for CVE-2020-27949	24 Jan 202110:47	–	gitee
Tenable Nessus	macOS 10.14.x < 10.14.6 Security Update 2020-007 / 10.15.x < 10.15.7 Security Update 2020-001 / macOS 11.x < 11.1 (HT212011)	18 Dec 202000:00	–	nessus
NVD	CVE-2020-27949	2 Apr 202118:15	–	nvd

NVD

Vulners

Node

apple mac_os_xRange10.14–10.14.6

apple mac_os_xRange10.15–10.15.7

apple mac_os_xMatch10.14.6-

apple mac_os_xMatch10.14.6security_update_2019-001

apple mac_os_xMatch10.14.6security_update_2019-002

apple mac_os_xMatch10.14.6security_update_2019-006

apple mac_os_xMatch10.14.6security_update_2019-007

apple mac_os_xMatch10.14.6security_update_2020-001

apple mac_os_xMatch10.14.6security_update_2020-002

apple mac_os_xMatch10.14.6security_update_2020-003

apple mac_os_xMatch10.14.6security_update_2020-004

apple mac_os_xMatch10.14.6security_update_2020-005

apple mac_os_xMatch10.14.6security_update_2020-006

apple mac_os_xMatch10.14.6supplemental_update

apple mac_os_xMatch10.14.6supplemental_update_2

apple mac_os_xMatch10.15.7-

apple mac_os_xMatch10.15.7supplemental_update

apple macosRange11.0–11.1.0

[
  {
    "product": "macOS",
    "vendor": "Apple",
    "versions": [
      {
        "lessThan": "11.1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
support	www.support.apple.com/en-us/HT212011

Parameter	Position	Path	Description	CWE
FASTTRAPIOC_MAKEPROBE	path	/dev/fasttrap	PoC exploit for CVE-2020-27949 using /dev/fasttrap to issue unauthorized FASTTRAP ioctl calls and read memory of other processes under DTrace.
FASTTRAPIOC_GETINSTR	path	/dev/fasttrap	PoC exploit for CVE-2020-27949 using /dev/fasttrap to issue unauthorized FASTTRAP ioctl calls and read memory of other processes under DTrace.

17 Jun 2026 03:09Current

5.1Medium risk

Vulners AI Score5.1

CVSS 24.3

CVSS 3.15.5

EPSS0.00977