CVE-2020-9866

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15.6, Security Update 2020-004 Mojave, Security Update 2020-004 High Sierra. A buffer overflow may result in arbitrary code execution.

• CWE-120

• https://support.apple.com/en-us/HT211289Release Notes, Vendor Advisory
• https://support.apple.com/en-us/HT211289Release Notes, Vendor Advisory

Published

Oct 27, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-9860A custom URL scheme handling issue was addressed with improv…5.4
• CVE-2020-9861A stack overflow issue existed in Swift for Linux. The issue…7.5
• CVE-2020-9862A command injection issue existed in Web Inspector. This iss…7.8
• CVE-2020-9863A memory initialization issue was addressed with improved me…7.8
• CVE-2020-9864A logic issue was addressed with improved restrictions. This…9.8
• CVE-2020-9865A memory corruption issue was addressed by removing the vuln…8.6
• CVE-2020-9868A certificate validation issue existed when processing admin…9.1
• CVE-2020-9869A memory corruption issue was addressed with improved memory…7.5
• CVE-2020-9870A logic issue was addressed with improved validation. This i…8.8
• CVE-2020-9871An out-of-bounds write issue was addressed with improved bou…7.8
• CVE-2020-9872An out-of-bounds write issue was addressed with improved bou…7.8
• CVE-2020-9873An out-of-bounds read was addressed with improved input vali…7.8