{"metadata": {"vulnerability": "CVE-2020-27930", "count": 74, "kinds": {"milestone": 6, "sighting": 24, "kev": 11, "other": 33}}, "data": [{"timestamp": "2020-10-27T00:00:00Z", "date_only": false, "value": "2020-10-27T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2020-27930", "field": "cveMetadata.dateReserved"}, {"timestamp": "2020-11-05T00:00:00Z", "date_only": false, "value": "2020-11-05T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202012-0781", "record": "VAR-202012-0781", "field": "sources_release_date.data.5.date"}, {"timestamp": "2020-11-06T00:00:00Z", "date_only": false, "value": "2020-11-06T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2020-AVI-717", "record": "CERTFR-2020-AVI-717", "field": "initial_release_date"}, {"timestamp": "2020-11-06T00:00:00Z", "date_only": false, "value": "2020-11-06T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2020-AVI-717", "record": "CERTFR-2020-AVI-717", "field": "revisions.0.revision_date"}, {"timestamp": "2020-11-06T04:00:00Z", "date_only": false, "value": "2020-11-06T04:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=524", "record": "CVE-2020-27930", "field": "creation_timestamp", "uuid": "b6ac5ebc-f823-44ef-b68f-1a99f6e8b6dd", "url": "https://www.govcert.gov.hk/en/alerts_detail.php?id=524"}, {"timestamp": "2020-11-06T09:06:43Z", "date_only": false, "value": "2020-11-06T09:06:43.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/892", "record": "CVE-2020-27930", "field": "creation_timestamp", "uuid": "0a54f4c9-5be6-4b6e-bb6a-6a2dd8a197b7", "content": "WARNING: Update your iOS devices now!\n\nApple releases emergency iOS update to patch 3 actively exploited 0-day vulnerabilities.\n\nRead details: https://thehackernews.com/2020/11/update-your-ios-devices-now-3-actively.html\n\n\u2705 CVE-2020-27930\n\u2705 CVE-2020-27932\n\u2705 CVE-2020-27950", "url": "https://t.me/thehackernews/892"}, {"timestamp": "2020-11-06T10:46:03Z", "date_only": false, "value": "2020-11-06T10:46:03.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/1121", "record": "CVE-2020-27930", "field": "creation_timestamp", "uuid": "ad54108a-61be-4d00-8641-b38eef6158d2", "content": "\u200b\u200b\u041a\u0430\u0437\u0430\u043b\u043e\u0441\u044c \u0431\u044b \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u043b\u0442\u043e\u0440\u0430 \u043c\u0435\u0441\u044f\u0446\u0430 \u043d\u0430\u0437\u0430\u0434 Apple \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 11 \u043e\u0448\u0438\u0431\u043e\u043a, \u0441\u0440\u0435\u0434\u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0431\u044b\u043b\u0430 \u0438 \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 (RCE). \u0418 \u0432\u043e\u0442 \u043e\u043f\u044f\u0442\u044c, \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u044b\u0435 \u0442\u0440\u0438 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u044f\u0431\u043b\u043e\u0447\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445. \n\n\u0412\u0447\u0435\u0440\u0430 Apple \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043e\u043a iOS, iPadOS \u0438 watchOS, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0438 \u0442\u0440\u0438 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u043e\u0441\u044c \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435 (!).\n\n\u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043d\u0435\u0442, \u043d\u043e \u043f\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u044b Google Project Zero, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0434\u044b\u0440\u043a\u0438, \u044d\u0442\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438:\n\n- CVE-2020-27930 - \u043e\u0448\u0438\u0431\u043a\u0430 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 FontParser, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a RCE;\n- CVE-2020-27932 - \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439;\n- CVE-2020-27950 - \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438\u0437 \u044f\u0434\u0440\u0430 \u041e\u0421.\n\n\u041e\u0447\u0435\u043d\u044c \u043d\u0435\u043f\u0440\u0438\u044f\u0442\u043d\u044b\u0435 \u043e\u0448\u0438\u0431\u043a\u0438, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e  \u0434\u0430\u0441\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u043f\u043e\u0434 \u0441\u0432\u043e\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c. \u0412\u0441\u0435\u043c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0441\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f. \u041c\u044b \u0443\u0436\u0435.", "url": "https://t.me/true_secator/1121"}, {"timestamp": "2020-11-06T15:57:15Z", "date_only": false, "value": "2020-11-06T15:57:15.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arvin_club/2957", "record": "CVE-2020-27930", "field": "creation_timestamp", "uuid": "e3529891-3908-4d89-98eb-177f4b8d0b7b", "content": "WARNING: Update your iOS devices now!\n\nApple releases emergency iOS update to patch 3 actively exploited 0-day vulnerabilities.\n\nRead details: https://thehackernews.com/2020/11/update-your-ios-devices-now-3-actively.html\n\n\u2705 CVE-2020-27930\n\u2705 CVE-2020-27932\n\u2705 CVE-2020-27950", "url": "https://t.me/arvin_club/2957"}, {"timestamp": "2020-11-08T07:51:35Z", "date_only": false, "value": "2020-11-08T07:51:35.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/apple-julkaisi-korjaavia-kriittisia-paivityksia-ios-laitteiden-0-paivahaavoihin", "record": "CVE-2020-27930", "field": "creation_timestamp", "uuid": "8040569f-2bca-456d-86ef-c8b9fe9c8320", "url": "https://www.kyberturvallisuuskeskus.fi/fi/apple-julkaisi-korjaavia-kriittisia-paivityksia-ios-laitteiden-0-paivahaavoihin"}, {"timestamp": "2020-11-09T18:10:20Z", "date_only": false, "value": "2020-11-09T18:10:20", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202012-0781", "record": "VAR-202012-0781", "field": "sources_release_date.data.4.date"}, {"timestamp": "2020-11-09T18:30:52Z", "date_only": false, "value": "2020-11-09T18:30:52", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202012-0781", "record": "VAR-202012-0781", "field": "sources_release_date.data.3.date"}, {"timestamp": "2020-11-13T00:00:00Z", "date_only": false, "value": "2020-11-13T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2020-AVI-747", "record": "CERTFR-2020-AVI-747", "field": "last_revision_date"}, {"timestamp": "2020-11-13T00:00:00Z", "date_only": false, "value": "2020-11-13T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2020-AVI-747", "record": "CERTFR-2020-AVI-747", "field": "initial_release_date"}, {"timestamp": "2020-11-13T00:00:00Z", "date_only": false, "value": "2020-11-13T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2020-AVI-747", "record": "CERTFR-2020-AVI-747", "field": "revisions.0.revision_date"}, {"timestamp": "2020-11-13T22:22:22Z", "date_only": false, "value": "2020-11-13T22:22:22", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202012-0781", "record": "VAR-202012-0781", "field": "sources_release_date.data.2.date"}, {"timestamp": "2020-12-08T00:00:00Z", "date_only": false, "value": "2020-12-08T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202012-0781", "record": "VAR-202012-0781", "field": "sources_release_date.data.0.date"}, {"timestamp": "2020-12-08T20:17:32Z", "date_only": false, "value": "2020-12-08T20:17:32.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2020-27930", "field": "cveMetadata.datePublished"}, {"timestamp": "2020-12-08T21:15:00Z", "date_only": false, "value": "2020-12-08T21:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-PCWP-P8JM-7XC7", "record": "GHSA-PCWP-P8JM-7XC7", "field": "database_specific.nvd_published_at"}, {"timestamp": "2020-12-08T21:15:00Z", "date_only": false, "value": "2020-12-08T21:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2020-27930", "record": "GSD-2020-27930", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2020-12-08T21:15:13.827Z", "date_only": false, "value": "2020-12-08T21:15:13.827000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202012-0781", "record": "VAR-202012-0781", "field": "sources_release_date.data.7.date"}, {"timestamp": "2020-12-08T21:15:13.827Z", "date_only": false, "value": "2020-12-08T21:15:13.827", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-27930", "record": "FKIE_CVE-2020-27930", "field": "published"}, {"timestamp": "2021-02-05T17:06:19Z", "date_only": false, "value": "2021-02-05T17:06:19.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / apple", "record": "CVE-2020-27930", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2021-02-11T00:00:00Z", "date_only": false, "value": "2021-02-11T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202012-0781", "record": "VAR-202012-0781", "field": "sources_update_date.data.0.date"}, {"timestamp": "2021-02-11T19:50:00Z", "date_only": false, "value": "2021-02-11T19:50Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2020-27930", "record": "GSD-2020-27930", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2021-08-12T00:00:00Z", "date_only": false, "value": "2021-08-12T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202012-0781", "record": "VAR-202012-0781", "field": "sources_release_date.data.6.date"}, {"timestamp": "2021-08-12T08:50:00Z", "date_only": false, "value": "2021-08-12T08:50:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202012-0781", "record": "VAR-202012-0781", "field": "sources_update_date.data.3.date"}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2020-27930", "field": "timestamps.asserted_at", "uuid": "deb7f093-4cf1-4d58-8471-28d220cfd298", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2020-27930", "field": "timestamps.asserted_at", "uuid": "4e560787-d504-4613-ba4f-5947e561e2e4", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": true, "value": "2021-11-03", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2020-27930", "field": "containers.adp.1.metrics.2.other.content.dateAdded"}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": true, "value": "2021-11-03", "kind": "other", "label": "Catalog added", "source": "gsd \u00b7 GSD-2020-27930", "record": "GSD-2020-27930", "field": "namespaces.cisa.gov.dateAdded"}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2020-27930", "field": "evidence.0.details.added_date", "uuid": "4e560787-d504-4613-ba4f-5947e561e2e4", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": true, "value": "2021-11-03", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2020-27930", "field": "evidence.0.details.date_added", "uuid": "deb7f093-4cf1-4d58-8471-28d220cfd298", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2020-27930", "field": "timestamps.first_seen_at", "uuid": "deb7f093-4cf1-4d58-8471-28d220cfd298", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2020-27930", "field": "timestamps.first_seen_at", "uuid": "4e560787-d504-4613-ba4f-5947e561e2e4", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2020-27930", "field": "status.status_updated_at", "uuid": "deb7f093-4cf1-4d58-8471-28d220cfd298", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2020-27930", "field": "status.status_updated_at", "uuid": "4e560787-d504-4613-ba4f-5947e561e2e4", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2020-27930", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2021-11-08T08:58:17Z", "date_only": false, "value": "2021-11-08T08:58:17.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422", "record": "CVE-2020-27930", "field": "creation_timestamp", "uuid": "183dce2e-4637-48a6-b576-f502b818f366"}, {"timestamp": "2021-11-20T09:53:52Z", "date_only": false, "value": "2021-11-20T09:53:52.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2020-27930", "field": "creation_timestamp", "uuid": "4d444e71-e94f-4f89-a82c-019c23147118"}, {"timestamp": "2022-03-08T00:00:00Z", "date_only": false, "value": "2022-03-08T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202012-0781", "record": "VAR-202012-0781", "field": "sources_update_date.data.2.date"}, {"timestamp": "2022-05-03T00:00:00Z", "date_only": true, "value": "2022-05-03", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2020-27930", "field": "evidence.0.details.due_date", "uuid": "deb7f093-4cf1-4d58-8471-28d220cfd298", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-05-03T00:00:00Z", "date_only": true, "value": "2022-05-03", "kind": "other", "label": "Remediation due", "source": "gsd \u00b7 GSD-2020-27930", "record": "GSD-2020-27930", "field": "namespaces.cisa.gov.dueDate"}, {"timestamp": "2022-05-24T17:35:42Z", "date_only": false, "value": "2022-05-24T17:35:42Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-PCWP-P8JM-7XC7", "record": "GHSA-PCWP-P8JM-7XC7", "field": "published"}, {"timestamp": "2022-06-03T18:52:35Z", "date_only": false, "value": "2022-06-03T18:52:35.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/2943", "record": "CVE-2020-27930", "field": "creation_timestamp", "uuid": "3b4b4638-9113-4af4-95b8-35104fe1b049", "content": "In-the-Wild Series: October 2020 0-day discovery for Android, Windows, iOS devices\nhttps://googleprojectzero.blogspot.com/2021/03/in-wild-series-october-2020-0-day.html\nPoCs:\nCVE-2020-15999\u00a0- Chrome Freetype heap buffer overflow\nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=2103\nCVE-2020-17087\u00a0- Windows heap buffer overflow in cng.sys\nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=2104\nCVE-2020-16009\u00a0- Chrome type confusion in V8\nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=2106\nCVE-2020-16010/16011\u00a0- Chrome heap buffer overflow\nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=2112\nCVE-2020-27930\u00a0- Safari arbitrary stack read/write\nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=2105\nCVE-2020-27950\u00a0- iOS XNU kernel memory disclosure\nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=2108\nCVE-2020-27932\u00a0- iOS kernel type confusion\nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=2107", "url": "https://t.me/CyberSecurityTechnologies/2943"}, {"timestamp": "2023-12-03T14:13:01Z", "date_only": false, "value": "2023-12-03T14:13:01.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/951", "record": "CVE-2020-27930", "field": "creation_timestamp", "uuid": "13ec82a7-ac90-4d04-b25b-86a066268fbc", "content": "#ExploitObserverAlert\n\nCVE-2020-27930\n\nDESCRIPTION: Exploit Observer has 13 entries related to CVE-2020-27930. A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave, iOS 14.2 and iPadOS 14.2, watchOS 5.3.9, macOS Catalina 10.15.7 Supplemental Update, macOS Catalina 10.15.7 Update. Processing a maliciously crafted font may lead to arbitrary code execution.\n\nFIRST-EPSS: 0.001920000\nNVD-IS: 5.9\nNVD-ES: 1.8", "url": "https://t.me/arpsyndicate/951"}, {"timestamp": "2023-12-13T01:22:10.775Z", "date_only": false, "value": "2023-12-13T01:22:10.775812Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2020-27930", "record": "GSD-2020-27930", "field": "gsd.osvSchema.modified"}, {"timestamp": "2023-12-20T00:00:00Z", "date_only": false, "value": "2023-12-20T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2020-AVI-717", "record": "CERTFR-2020-AVI-717", "field": "last_revision_date"}, {"timestamp": "2023-12-20T00:00:00Z", "date_only": false, "value": "2023-12-20T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2020-AVI-717", "record": "CERTFR-2020-AVI-717", "field": "revisions.1.revision_date"}, {"timestamp": "2024-08-04T16:25:44.098Z", "date_only": false, "value": "2024-08-04T16:25:44.098Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2020-27930", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-09T19:19:19Z", "date_only": false, "value": "2024-10-09T19:19:19.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityTechnologies/2643", "record": "CVE-2020-27930", "field": "creation_timestamp", "uuid": "b4164cf9-58ea-4a75-a2cc-d420e09a0443", "content": "#exploit\nApple CoreText libType1Scaler.dylib:\n\n1. CVE-2020-27943:\nHeap BoF in Counter Control Hints on macOS 10.15.7\nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=2114\n\n2. CVE-2020-27930:\nApple Safari RCE\nhttps://packetstormsecurity.com/files/161294/GS20210205162808.tgz\n\n3. CVE-2020-27946:\nMemory Disclosure\nhttps://packetstormsecurity.com/files/161297/Apple-CoreText-libType1Scaler.dylib-Memory-Disclosure.html", "url": "https://t.me/CyberSecurityTechnologies/2643"}, {"timestamp": "2024-12-24T20:24:56.007Z", "date_only": false, "value": "2024-12-24T20:24:56.007866Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971146", "record": "CVE-2020-27930", "field": "creation_timestamp", "uuid": "7cefebfd-3d3e-4d0d-856d-4d20161a85d2", "url": "https://feedsin.space/feed/CISAKevBot/items/2971146"}, {"timestamp": "2025-01-29T17:35:09.436Z", "date_only": false, "value": "2025-01-29T17:35:09.436681Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2020-27930", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-01-29T17:35:09.436Z", "date_only": false, "value": "2025-01-29T17:35:09.436681Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-27930", "record": "FKIE_CVE-2020-27930", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-02-23T02:09:47Z", "date_only": false, "value": "2025-02-23T02:09:47.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2020-27930", "field": "creation_timestamp", "uuid": "1b91ae57-d177-431c-b92b-c0f893eb2fa1"}, {"timestamp": "2025-10-21T23:35:31.914Z", "date_only": false, "value": "2025-10-21T23:35:31.914Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2020-27930", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:35:31.914Z", "date_only": false, "value": "2025-10-21T23:35:31.914Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2020-27930", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:32:01Z", "date_only": false, "value": "2025-10-22T00:32:01Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-PCWP-P8JM-7XC7", "record": "GHSA-PCWP-P8JM-7XC7", "field": "modified"}, {"timestamp": "2025-10-27T17:38:57.543Z", "date_only": false, "value": "2025-10-27T17:38:57.543000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202012-0781", "record": "VAR-202012-0781", "field": "sources_update_date.data.4.date"}, {"timestamp": "2025-11-18T12:20:42.112Z", "date_only": false, "value": "2025-11-18T12:20:42.112000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-202012-0781", "record": "VAR-202012-0781", "field": "last_update_date"}, {"timestamp": "2026-02-02T12:28:36.289Z", "date_only": false, "value": "2026-02-02T12:28:36.289816Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5e9a7a96-a30e-4d33-8fbf-e725edef43df", "record": "CVE-2020-27930", "field": "creation_timestamp", "uuid": "0fb259ea-1ff3-4d57-ad00-b5c8c50126bf", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5e9a7a96-a30e-4d33-8fbf-e725edef43df"}, {"timestamp": "2026-02-02T12:28:36.289Z", "date_only": false, "value": "2026-02-02T12:28:36.289816Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5e9a7a96-a30e-4d33-8fbf-e725edef43df", "record": "CVE-2020-27930", "field": "creation_timestamp", "uuid": "92f4a0f6-f873-4d5a-b239-bf831158ad29", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5e9a7a96-a30e-4d33-8fbf-e725edef43df"}, {"timestamp": "2026-02-02T13:24:01Z", "date_only": false, "value": "2026-02-02T13:24:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2020-27930", "field": "timestamps.recorded_at", "uuid": "deb7f093-4cf1-4d58-8471-28d220cfd298", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-03-17T14:50:43.820Z", "date_only": false, "value": "2026-03-17T14:50:43.820722Z", "kind": "sighting", "label": "Seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=524", "record": "CVE-2020-27930", "field": "creation_timestamp", "uuid": "869a9528-9e58-4eb5-9110-fcc39f44d67d", "url": "https://www.govcert.gov.hk/en/alerts_detail.php?id=524"}, {"timestamp": "2026-03-17T14:50:50.495Z", "date_only": false, "value": "2026-03-17T14:50:50.495988Z", "kind": "sighting", "label": "Seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/apple-julkaisi-korjaavia-kriittisia-paivityksia-ios-laitteiden-0-paivahaavoihin", "record": "CVE-2020-27930", "field": "creation_timestamp", "uuid": "6852d8e7-763c-4228-b1ad-1d6c247cd461", "url": "https://www.kyberturvallisuuskeskus.fi/fi/apple-julkaisi-korjaavia-kriittisia-paivityksia-ios-laitteiden-0-paivahaavoihin"}, {"timestamp": "2026-06-17T03:09:53.467Z", "date_only": false, "value": "2026-06-17T03:09:53.467", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-27930", "record": "FKIE_CVE-2020-27930", "field": "lastModified"}, {"timestamp": "2026-06-19T12:47:55.390Z", "date_only": false, "value": "2026-06-19T12:47:55.390517Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4e23354b-f709-4c9f-b0b9-7f95c14ece21", "record": "CVE-2020-27930", "field": "creation_timestamp", "uuid": "b45708d1-6afd-4c3b-8bc0-39801489db79", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4e23354b-f709-4c9f-b0b9-7f95c14ece21"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2020-27930", "field": "timestamps.recorded_at", "uuid": "4e560787-d504-4613-ba4f-5947e561e2e4", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:13:23.915Z", "date_only": false, "value": "2026-06-23T11:13:23.915599Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/4e560787-d504-4613-ba4f-5947e561e2e4", "record": "CVE-2020-27930", "field": "creation_timestamp", "uuid": "fe563aa6-7040-40ad-af8c-26414d9f5ab5", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/4e560787-d504-4613-ba4f-5947e561e2e4"}, {"timestamp": "2026-06-23T14:04:48.220Z", "date_only": false, "value": "2026-06-23T14:04:48.220024Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e02de49c-25ce-4c15-9cca-3c9eb8b6c67d", "record": "CVE-2020-27930", "field": "creation_timestamp", "uuid": "e476cf4b-b191-479b-971f-1b52db71e320", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e02de49c-25ce-4c15-9cca-3c9eb8b6c67d"}, {"timestamp": "2026-07-12T22:00:16.895Z", "date_only": false, "value": "2026-07-12T22:00:16.895750Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pleyades_it/7906", "record": "CVE-2020-27930", "field": "creation_timestamp", "uuid": "2462b1aa-caa0-47cf-a5a7-8809fc123066", "url": "https://t.me/pleyades_it/7906"}, {"timestamp": "2026-07-13T00:00:40.741Z", "date_only": false, "value": "2026-07-13T00:00:40.741413Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pleyades_it/7906", "record": "CVE-2020-27930", "field": "creation_timestamp", "uuid": "24b10757-e0e6-484a-921d-48bb4201b8fc", "url": "https://t.me/pleyades_it/7906"}, {"timestamp": "2026-07-14T00:00:51.608Z", "date_only": false, "value": "2026-07-14T00:00:51.608684Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/pleyades_it/7906", "record": "CVE-2020-27930", "field": "creation_timestamp", "uuid": "ebabcad7-22e0-4e4f-84e7-f84ad36ac2b7", "url": "https://t.me/pleyades_it/7906"}, {"timestamp": "2026-09-01T17:00:58.253Z", "date_only": false, "value": "2026-09-01T17:00:58.253435Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/2629", "record": "CVE-2020-27930", "field": "creation_timestamp", "uuid": "5ccb06d3-4d5b-4af1-a4b6-d8f8c7287fb5", "url": "https://t.me/cissp/2629"}, {"timestamp": "2026-09-11T15:00:05.443Z", "date_only": false, "value": "2026-09-11T15:00:05.443521Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cissp/2629", "record": "CVE-2020-27930", "field": "creation_timestamp", "uuid": "03773417-04e2-4daf-874f-ff479e9038b3", "url": "https://t.me/cissp/2629"}]}