CVE-2020-27894

EPSS 0.7%

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 0.7%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

08 Dec 2020Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

The issue was addressed with additional user controls. This issue is fixed in macOS Big Sur 11.0.1. Users may be unable to remove metadata indicating where files were downloaded from.

Affected products

Apple · macOS

References

http://seclists.org/fulldisclosure/2020/Dec/32 https://support.apple.com/en-us/HT211931