CVE-2020-27898

MEDIUM

macOS < 11.0.1 - Denial of Service via Managed Frame Protection Bypass

Title source: llm
STIX 2.1

Description

A denial of service issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.0.1. An attacker may be able to bypass Managed Frame Protection.

References (4)

Core 4
Core References
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT211931
Vendor Advisory x_refsource_confirm
https://support.apple.com/kb/HT212011
Mailing List, Third Party Advisory mailing-list x_refsource_fulldisc
http://seclists.org/fulldisclosure/2020/Dec/32
Mailing List, Third Party Advisory mailing-list x_refsource_fulldisc
http://seclists.org/fulldisclosure/2020/Dec/26

Scores

CVSS v3 5.5
EPSS 0.0099
EPSS Percentile 57.8%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Details

CWE
CWE-252
Status published
Products (1)
apple/macos < 11.0.1
Published Dec 08, 2020
Tracked Since Feb 18, 2026