VulnerabilityModified
CVE-2020-27894
The issue was addressed with additional user controls.
MEDIUM 5.5EPSS 0.71%
Does this matter?
Lower severity and a low EPSS score (0.71%). Track it; it rarely justifies an emergency change on its own.
Description
The issue was addressed with additional user controls. This issue is fixed in macOS Big Sur 11.0.1. Users may be unable to remove metadata indicating where files were downloaded from.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
- EPSS
- 0.71% probability · 51th percentile
- CISA KEV
- Not listed
- Affected
- apple/macos
- Source
- product-security@apple.com
References
- http://seclists.org/fulldisclosure/2020/Dec/32Mailing List, Third Party Advisory
- https://support.apple.com/en-us/HT211931Release Notes, Vendor Advisory
- http://seclists.org/fulldisclosure/2020/Dec/32Mailing List, Third Party Advisory
- https://support.apple.com/en-us/HT211931Release Notes, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.