CVE-2020-9966

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.0, tvOS 14.0, iOS 14.0 and iPadOS 14.0. An application may be able to execute arbitrary code with kernel privileges.

• CWE-125

• http://seclists.org/fulldisclosure/2020/Dec/32Mailing List, Third Party Advisory
• https://support.apple.com/en-us/HT211843Vendor Advisory
• https://support.apple.com/en-us/HT211844Vendor Advisory
• https://support.apple.com/en-us/HT211850Vendor Advisory
• https://support.apple.com/en-us/HT211931Vendor Advisory
• http://seclists.org/fulldisclosure/2020/Dec/32Mailing List, Third Party Advisory
• https://support.apple.com/en-us/HT211843Vendor Advisory
• https://support.apple.com/en-us/HT211844Vendor Advisory
• https://support.apple.com/en-us/HT211850Vendor Advisory
• https://support.apple.com/en-us/HT211931Vendor Advisory

Published

Dec 8, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-9960An out-of-bounds read was addressed with improved input vali…7.8
• CVE-2020-9961An out-of-bounds read was addressed with improved input vali…7.8
• CVE-2020-9962A buffer overflow was addressed with improved size validatio…7.8
• CVE-2020-9963The issue was addressed with improved handling of icon cache…5.5
• CVE-2020-9964A memory initialization issue was addressed with improved me…5.5
• CVE-2020-9965An out-of-bounds read was addressed with improved input vali…7.8
• CVE-2020-9967Multiple memory corruption issues were addressed with improv…7.8
• CVE-2020-9968A logic issue was addressed with improved restrictions. This…5.5
• CVE-2020-9969An access issue was addressed with additional sandbox restri…5.5
• CVE-2020-9971A logic issue was addressed with improved validation. This i…7.8
• CVE-2020-9972A buffer overflow issue was addressed with improved memory h…7.8
• CVE-2020-9973An out-of-bounds read was addressed with improved bounds che…7.8