CVE-2020-27951

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

This issue was addressed with improved checks. This issue is fixed in watchOS 6.3, iOS 12.5, iOS 14.3 and iPadOS 14.3, watchOS 7.2. Unauthorized code execution may lead to an authentication policy violation.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published: Apr 2, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-279527.8An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Cat CVE-2020-279559.8Git LFS 2.12.0 allows Remote Code Execution.CVE-2020-279569.8An Arbitrary File Upload in the Upload Image component in SourceCodester Car Rental Management System 1.0 allows the user to conduct remote CVE-2020-279575.4The RandomGameUnit extension for MediaWiki through 1.35 was not properly escaping various title-related data. When certain varieties of game CVE-2020-279584.3The Job Composer app in Ohio Supercomputer Center Open OnDemand before 1.7.19 and 1.8.x before 1.8.18 allows remote authenticated users to p CVE-2020-27968.2Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Message Display). Supported versions that are affect CVE-2020-279697.3Yandex Browser for Android 20.8.4 allows remote attackers to perform SOP bypass and addresss bar spoofing CVE-2020-27976.1Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Process Scheduler). Supported versions that CVE-2020-279705.3Yandex Browser before 20.10.0 allows remote attackers to spoof the address bar CVE-2020-279746.1NeoPost Mail Accounting Software Pro 5.0.6 allows php/Commun/FUS_SCM_BlockStart.php?code= XSS.CVE-2020-279758.8osCommerce Phoenix CE before 1.0.5.4 allows admin/define_language.php CSRF.CVE-2020-279769.8osCommerce Phoenix CE before 1.0.5.4 allows OS command injection remotely. Within admin/mail.php, a from POST parameter can be passed to the