{"metadata": {"vulnerability": "CVE-2020-27932", "count": 82, "kinds": {"milestone": 6, "sighting": 32, "kev": 11, "other": 33}}, "data": [{"timestamp": "2020-10-27T00:00:00Z", "date_only": false, "value": "2020-10-27T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2020-27932", "field": "cveMetadata.dateReserved"}, {"timestamp": "2020-11-05T00:00:00Z", "date_only": false, "value": "2020-11-05T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202012-0782", "record": "VAR-202012-0782", "field": "sources_release_date.data.5.date"}, {"timestamp": "2020-11-06T00:00:00Z", "date_only": false, "value": "2020-11-06T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2020-AVI-717", "record": "CERTFR-2020-AVI-717", "field": "initial_release_date"}, {"timestamp": "2020-11-06T00:00:00Z", "date_only": false, "value": "2020-11-06T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2020-AVI-717", "record": "CERTFR-2020-AVI-717", "field": "revisions.0.revision_date"}, {"timestamp": "2020-11-06T04:00:00Z", "date_only": false, "value": "2020-11-06T04:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=524", "record": "CVE-2020-27932", "field": "creation_timestamp", "uuid": "902c7cd8-22cf-4148-9038-1158e44c8653", "url": "https://www.govcert.gov.hk/en/alerts_detail.php?id=524"}, {"timestamp": "2020-11-06T09:06:43Z", "date_only": false, "value": "2020-11-06T09:06:43.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/892", "record": "CVE-2020-27932", "field": "creation_timestamp", "uuid": "85558b4b-93ac-41f8-9e8b-a43599c87c5f", "content": "WARNING: Update your iOS devices now!\n\nApple releases emergency iOS update to patch 3 actively exploited 0-day vulnerabilities.\n\nRead details: https://thehackernews.com/2020/11/update-your-ios-devices-now-3-actively.html\n\n\u2705 CVE-2020-27930\n\u2705 CVE-2020-27932\n\u2705 CVE-2020-27950", "url": "https://t.me/thehackernews/892"}, {"timestamp": "2020-11-06T10:46:03Z", "date_only": false, "value": "2020-11-06T10:46:03.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/1121", "record": "CVE-2020-27932", "field": "creation_timestamp", "uuid": "dc9e9b6f-f9c3-4b4a-86fd-eeb9508d7b20", "content": "\u200b\u200b\u041a\u0430\u0437\u0430\u043b\u043e\u0441\u044c \u0431\u044b \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u043b\u0442\u043e\u0440\u0430 \u043c\u0435\u0441\u044f\u0446\u0430 \u043d\u0430\u0437\u0430\u0434 Apple \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 11 \u043e\u0448\u0438\u0431\u043e\u043a, \u0441\u0440\u0435\u0434\u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0431\u044b\u043b\u0430 \u0438 \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 (RCE). \u0418 \u0432\u043e\u0442 \u043e\u043f\u044f\u0442\u044c, \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u044b\u0435 \u0442\u0440\u0438 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u044f\u0431\u043b\u043e\u0447\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445. \n\n\u0412\u0447\u0435\u0440\u0430 Apple \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043e\u043a iOS, iPadOS \u0438 watchOS, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0438 \u0442\u0440\u0438 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u043e\u0441\u044c \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435 (!).\n\n\u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043d\u0435\u0442, \u043d\u043e \u043f\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u044b Google Project Zero, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0434\u044b\u0440\u043a\u0438, \u044d\u0442\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438:\n\n- CVE-2020-27930 - \u043e\u0448\u0438\u0431\u043a\u0430 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 FontParser, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a RCE;\n- CVE-2020-27932 - \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439;\n- CVE-2020-27950 - \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438\u0437 \u044f\u0434\u0440\u0430 \u041e\u0421.\n\n\u041e\u0447\u0435\u043d\u044c \u043d\u0435\u043f\u0440\u0438\u044f\u0442\u043d\u044b\u0435 \u043e\u0448\u0438\u0431\u043a\u0438, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e  \u0434\u0430\u0441\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u043f\u043e\u0434 \u0441\u0432\u043e\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c. \u0412\u0441\u0435\u043c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0441\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f. \u041c\u044b \u0443\u0436\u0435.", "url": "https://t.me/true_secator/1121"}, {"timestamp": "2020-11-06T15:57:15Z", "date_only": false, "value": "2020-11-06T15:57:15.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arvin_club/2957", "record": "CVE-2020-27932", "field": "creation_timestamp", "uuid": "fd096df4-f32b-423b-99e6-495224961e3b", "content": "WARNING: Update your iOS devices now!\n\nApple releases emergency iOS update to patch 3 actively exploited 0-day vulnerabilities.\n\nRead details: https://thehackernews.com/2020/11/update-your-ios-devices-now-3-actively.html\n\n\u2705 CVE-2020-27930\n\u2705 CVE-2020-27932\n\u2705 CVE-2020-27950", "url": "https://t.me/arvin_club/2957"}, {"timestamp": "2020-11-08T07:51:35Z", "date_only": false, "value": "2020-11-08T07:51:35.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/apple-julkaisi-korjaavia-kriittisia-paivityksia-ios-laitteiden-0-paivahaavoihin", "record": "CVE-2020-27932", "field": "creation_timestamp", "uuid": "210a2900-90b8-43f7-a48d-8a374648702a", "url": "https://www.kyberturvallisuuskeskus.fi/fi/apple-julkaisi-korjaavia-kriittisia-paivityksia-ios-laitteiden-0-paivahaavoihin"}, {"timestamp": "2020-11-09T18:10:20Z", "date_only": false, "value": "2020-11-09T18:10:20", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202012-0782", "record": "VAR-202012-0782", "field": "sources_release_date.data.4.date"}, {"timestamp": "2020-11-09T18:30:52Z", "date_only": false, "value": "2020-11-09T18:30:52", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202012-0782", "record": "VAR-202012-0782", "field": "sources_release_date.data.3.date"}, {"timestamp": "2020-11-13T00:00:00Z", "date_only": false, "value": "2020-11-13T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2020-AVI-747", "record": "CERTFR-2020-AVI-747", "field": "last_revision_date"}, {"timestamp": "2020-11-13T00:00:00Z", "date_only": false, "value": "2020-11-13T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2020-AVI-747", "record": "CERTFR-2020-AVI-747", "field": "initial_release_date"}, {"timestamp": "2020-11-13T00:00:00Z", "date_only": false, "value": "2020-11-13T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2020-AVI-747", "record": "CERTFR-2020-AVI-747", "field": "revisions.0.revision_date"}, {"timestamp": "2020-11-13T22:22:22Z", "date_only": false, "value": "2020-11-13T22:22:22", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202012-0782", "record": "VAR-202012-0782", "field": "sources_release_date.data.2.date"}, {"timestamp": "2020-12-08T00:00:00Z", "date_only": false, "value": "2020-12-08T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202012-0782", "record": "VAR-202012-0782", "field": "sources_release_date.data.0.date"}, {"timestamp": "2020-12-08T20:13:49Z", "date_only": false, "value": "2020-12-08T20:13:49.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2020-27932", "field": "cveMetadata.datePublished"}, {"timestamp": "2020-12-08T21:15:00Z", "date_only": false, "value": "2020-12-08T21:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-F3WV-RX3X-V6FH", "record": "GHSA-F3WV-RX3X-V6FH", "field": "database_specific.nvd_published_at"}, {"timestamp": "2020-12-08T21:15:00Z", "date_only": false, "value": "2020-12-08T21:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2020-27932", "record": "GSD-2020-27932", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2020-12-08T21:15:13.903Z", "date_only": false, "value": "2020-12-08T21:15:13.903000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202012-0782", "record": "VAR-202012-0782", "field": "sources_release_date.data.7.date"}, {"timestamp": "2020-12-08T21:15:13.903Z", "date_only": false, "value": "2020-12-08T21:15:13.903", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-27932", "record": "FKIE_CVE-2020-27932", "field": "published"}, {"timestamp": "2020-12-09T00:36:39Z", "date_only": false, "value": "2020-12-09T00:36:39.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/17312", "record": "CVE-2020-27932", "field": "creation_timestamp", "uuid": "97d7d8b6-574f-45d6-b053-651ccc3a4eca", "content": "\u203c CVE-2020-27932 \u203c\n\nA type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave, iOS 14.2 and iPadOS 14.2, watchOS 5.3.9, macOS Catalina 10.15.7 Supplemental Update, macOS Catalina 10.15.7 Update. A malicious application may be able to execute arbitrary code with kernel privileges.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/17312"}, {"timestamp": "2020-12-09T07:34:55Z", "date_only": false, "value": "2020-12-09T07:34:55.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/17454", "record": "CVE-2020-27932", "field": "creation_timestamp", "uuid": "831db812-2bb1-4ca6-8ed0-8d97fa3e566a", "content": "\u203c CVE-2020-27932 \u203c\n\nA type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave, iOS 14.2 and iPadOS 14.2, watchOS 5.3.9, macOS Catalina 10.15.7 Supplemental Update, macOS Catalina 10.15.7 Update. A malicious application may be able to execute arbitrary code with kernel privileges.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/17454"}, {"timestamp": "2021-02-05T17:06:24Z", "date_only": false, "value": "2021-02-05T17:06:24.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / apple", "record": "CVE-2020-27932", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2021-02-07T00:00:00Z", "date_only": false, "value": "2021-02-07T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202012-0782", "record": "VAR-202012-0782", "field": "sources_update_date.data.2.date"}, {"timestamp": "2021-02-11T00:00:00Z", "date_only": false, "value": "2021-02-11T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202012-0782", "record": "VAR-202012-0782", "field": "sources_update_date.data.0.date"}, {"timestamp": "2021-02-11T19:50:00Z", "date_only": false, "value": "2021-02-11T19:50Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2020-27932", "record": "GSD-2020-27932", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2021-03-03T05:37:03Z", "date_only": false, "value": "2021-03-03T05:37:03.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityTechnologies/2815", "record": "CVE-2020-27932", "field": "creation_timestamp", "uuid": "a9ce684d-8ae1-4bbf-bfb6-7961d77474fd", "content": "#Analytics\nTop 10 Most Used Vulnerabilities of the Month (feb 1-28)\nCVE-2021-3156 - Heap-Based Buffer Overflow in Sudo\nhttps://t.me/cybersecuritytechnologies/2577\nCVE-2021-21972 - VMware vCenter RCE\nhttps://swarm.ptsecurity.com/unauth-rce-vmware/#more-2477\nhttps://github.com/QmF0c3UK/CVE-2021-21972-vCenter-6.5-7.0-RCE-POC\nhttps://github.com/NS-Sp4ce/CVE-2021-21972\nhttps://github.com/yaunsky/CVE-2021-21972\nCVE-2021-1732 - Windows kernel 0-day exploit is used by BITTER APT\nhttps://t.me/cybersecuritytechnologies/2679\nCVE-2021-1782 - iOS\\iPadOS 14.3 kernel LPE\nhttps://t.me/cybersecuritytechnologies/2694\nCVE-2021-25646 - Apache Druid <=0.20.1 RCE\nhttps://t.me/cybersecuritytechnologies/2639\nCVE-2020-27932 - A type confusion in MacOS 10.15.7\nhttps://t.me/cybersecuritytechnologies/2383\nCVE-2021-24074, CVE-2021-24094, CVE-2021-24086 - Windows IPv4/IPv6 Stack RCE/DoS Vulnerabilities\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday", "url": "https://t.me/CyberSecurityTechnologies/2815"}, {"timestamp": "2021-08-12T00:00:00Z", "date_only": false, "value": "2021-08-12T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202012-0782", "record": "VAR-202012-0782", "field": "sources_release_date.data.6.date"}, {"timestamp": "2021-08-12T05:22:00Z", "date_only": false, "value": "2021-08-12T05:22:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202012-0782", "record": "VAR-202012-0782", "field": "sources_update_date.data.3.date"}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2020-27932", "field": "timestamps.asserted_at", "uuid": "767de69b-4fe7-4362-9cab-2e9a50e01208", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2020-27932", "field": "timestamps.asserted_at", "uuid": "b9523f43-c3bc-43e6-85f4-bdbbbb4b066c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": true, "value": "2021-11-03", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2020-27932", "field": "containers.adp.1.metrics.2.other.content.dateAdded"}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": true, "value": "2021-11-03", "kind": "other", "label": "Catalog added", "source": "gsd \u00b7 GSD-2020-27932", "record": "GSD-2020-27932", "field": "namespaces.cisa.gov.dateAdded"}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2020-27932", "field": "evidence.0.details.added_date", "uuid": "b9523f43-c3bc-43e6-85f4-bdbbbb4b066c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": true, "value": "2021-11-03", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2020-27932", "field": "evidence.0.details.date_added", "uuid": "767de69b-4fe7-4362-9cab-2e9a50e01208", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2020-27932", "field": "timestamps.first_seen_at", "uuid": "767de69b-4fe7-4362-9cab-2e9a50e01208", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2020-27932", "field": "timestamps.first_seen_at", "uuid": "b9523f43-c3bc-43e6-85f4-bdbbbb4b066c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2020-27932", "field": "status.status_updated_at", "uuid": "767de69b-4fe7-4362-9cab-2e9a50e01208", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2020-27932", "field": "status.status_updated_at", "uuid": "b9523f43-c3bc-43e6-85f4-bdbbbb4b066c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2020-27932", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2021-11-08T08:58:17Z", "date_only": false, "value": "2021-11-08T08:58:17.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422", "record": "CVE-2020-27932", "field": "creation_timestamp", "uuid": "bba77f68-35fa-422a-ab69-9ec04870c921"}, {"timestamp": "2021-11-20T09:53:52Z", "date_only": false, "value": "2021-11-20T09:53:52.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2020-27932", "field": "creation_timestamp", "uuid": "ff874acb-d16f-42a5-8913-fe9f27a974ac"}, {"timestamp": "2022-02-27T23:15:42Z", "date_only": false, "value": "2022-02-27T23:15:42.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/androidMalware/1128", "record": "CVE-2020-27932", "field": "creation_timestamp", "uuid": "f4c80247-62a1-42c5-b500-1b8321f2bd48", "content": "CVE-2020-27932: iOS Kernel privesc with turnstiles \nhttps://googleprojectzero.blogspot.com/p/rca-cve-2020-27932.html", "url": "https://t.me/androidMalware/1128"}, {"timestamp": "2022-05-03T00:00:00Z", "date_only": true, "value": "2022-05-03", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2020-27932", "field": "evidence.0.details.due_date", "uuid": "767de69b-4fe7-4362-9cab-2e9a50e01208", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-05-03T00:00:00Z", "date_only": true, "value": "2022-05-03", "kind": "other", "label": "Remediation due", "source": "gsd \u00b7 GSD-2020-27932", "record": "GSD-2020-27932", "field": "namespaces.cisa.gov.dueDate"}, {"timestamp": "2022-05-24T17:35:44Z", "date_only": false, "value": "2022-05-24T17:35:44Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-F3WV-RX3X-V6FH", "record": "GHSA-F3WV-RX3X-V6FH", "field": "published"}, {"timestamp": "2022-06-03T18:52:35Z", "date_only": false, "value": "2022-06-03T18:52:35.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/2943", "record": "CVE-2020-27932", "field": "creation_timestamp", "uuid": "093e654b-0bd9-400f-8fc1-e61786a1e9ce", "content": "In-the-Wild Series: October 2020 0-day discovery for Android, Windows, iOS devices\nhttps://googleprojectzero.blogspot.com/2021/03/in-wild-series-october-2020-0-day.html\nPoCs:\nCVE-2020-15999\u00a0- Chrome Freetype heap buffer overflow\nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=2103\nCVE-2020-17087\u00a0- Windows heap buffer overflow in cng.sys\nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=2104\nCVE-2020-16009\u00a0- Chrome type confusion in V8\nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=2106\nCVE-2020-16010/16011\u00a0- Chrome heap buffer overflow\nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=2112\nCVE-2020-27930\u00a0- Safari arbitrary stack read/write\nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=2105\nCVE-2020-27950\u00a0- iOS XNU kernel memory disclosure\nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=2108\nCVE-2020-27932\u00a0- iOS kernel type confusion\nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=2107", "url": "https://t.me/CyberSecurityTechnologies/2943"}, {"timestamp": "2023-12-13T01:22:11.098Z", "date_only": false, "value": "2023-12-13T01:22:11.098728Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2020-27932", "record": "GSD-2020-27932", "field": "gsd.osvSchema.modified"}, {"timestamp": "2023-12-20T00:00:00Z", "date_only": false, "value": "2023-12-20T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2020-AVI-717", "record": "CERTFR-2020-AVI-717", "field": "last_revision_date"}, {"timestamp": "2023-12-20T00:00:00Z", "date_only": false, "value": "2023-12-20T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2020-AVI-717", "record": "CERTFR-2020-AVI-717", "field": "revisions.1.revision_date"}, {"timestamp": "2024-05-22T06:15:17Z", "date_only": false, "value": "2024-05-22T06:15:17.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityTechnologies/2661", "record": "CVE-2020-27932", "field": "creation_timestamp", "uuid": "6cf81c67-ec56-4e64-9604-c25a753d11df", "content": "#Analytics\n10 most exploited vulnerabilities of the week (feb 1-7)\nCVE-2020-1350 - Exploit SIGRed/Windows DNS Server RCE\nhttps://t.me/cybersecuritytechnologies/1422\nCVE-2021-3156 - Heap-Based Buffer Overflow in Sudo\nhttps://t.me/cybersecuritytechnologies/2577\nCVE-2020-7961 - Arbitrary code execution via JSONWS\nhttps://t.me/cybersecuritytechnologies/869\nCVE-2021-25646 - Apache Druid <=0.20.1 RCE\nhttps://t.me/cybersecuritytechnologies/2639\nCVE-2020-27932 - A type confusion in MacOS 10.15.7\nhttps://t.me/cybersecuritytechnologies/2383\nCVE-2019-9041 - ZzzCMS RCE\nhttps://mobile.twitter.com/i/web/status/1357931580098899970\nCVE-2021-22122 - XSS vulnerability in FortiWeb\nhttps://vulmon.com/vulnerabilitydetails?qid=CVE-2021-22122\nCVE-2019-5127 - A cmd injection in YouPHPTube Encoder\nhttps://mobile.twitter.com/i/web/status/1357546718821142528\nCVE-2020-17523 - Apache Shiro pathMatches Auth. Bypass\nhttps://t.me/cybersecuritytechnologies/2650", "url": "https://t.me/CyberSecurityTechnologies/2661"}, {"timestamp": "2024-08-04T16:25:43.916Z", "date_only": false, "value": "2024-08-04T16:25:43.916Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2020-27932", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-09T20:07:27Z", "date_only": false, "value": "2024-10-09T20:07:27.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/2377", "record": "CVE-2020-27932", "field": "creation_timestamp", "uuid": "f6d28ee6-dd15-46e2-8d46-ff29f333acec", "content": "#Threat_Research\n1. Google Cloud Platform (GCP) Service Account-based Privilege Escalation paths\nhttps://www.praetorian.com/blog/google-cloud-platform-gcp-service-account-based-privilege-escalation-paths\n2. Examining CVE-2020-27932 on macOS 10.15.7\nhttps://worthdoingbadly.com/specialreply\n]-> PoC: https://gist.github.com/zhuowei/861fd8878397d9696303259f40cb01b3", "url": "https://t.me/CyberSecurityTechnologies/2377"}, {"timestamp": "2024-12-24T20:24:53.472Z", "date_only": false, "value": "2024-12-24T20:24:53.472250Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971143", "record": "CVE-2020-27932", "field": "creation_timestamp", "uuid": "aceef011-42f9-46b4-8dfd-745930da4927", "url": "https://feedsin.space/feed/CISAKevBot/items/2971143"}, {"timestamp": "2025-01-29T17:37:43.525Z", "date_only": false, "value": "2025-01-29T17:37:43.525317Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2020-27932", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-01-29T17:37:43.525Z", "date_only": false, "value": "2025-01-29T17:37:43.525317Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-27932", "record": "FKIE_CVE-2020-27932", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-02-23T02:09:47Z", "date_only": false, "value": "2025-02-23T02:09:47.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2020-27932", "field": "creation_timestamp", "uuid": "b9368e06-460d-4c62-ad89-542efddd0b2c"}, {"timestamp": "2025-10-21T23:35:32.201Z", "date_only": false, "value": "2025-10-21T23:35:32.201Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2020-27932", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:35:32.201Z", "date_only": false, "value": "2025-10-21T23:35:32.201Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2020-27932", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:32:01Z", "date_only": false, "value": "2025-10-22T00:32:01Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-F3WV-RX3X-V6FH", "record": "GHSA-F3WV-RX3X-V6FH", "field": "modified"}, {"timestamp": "2025-10-27T17:38:51.260Z", "date_only": false, "value": "2025-10-27T17:38:51.260000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202012-0782", "record": "VAR-202012-0782", "field": "sources_update_date.data.4.date"}, {"timestamp": "2025-11-18T13:12:53.237Z", "date_only": false, "value": "2025-11-18T13:12:53.237000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-202012-0782", "record": "VAR-202012-0782", "field": "last_update_date"}, {"timestamp": "2026-02-02T12:28:36.637Z", "date_only": false, "value": "2026-02-02T12:28:36.637359Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fdc1a843-531a-47ca-bb86-3b1549345377", "record": "CVE-2020-27932", "field": "creation_timestamp", "uuid": "55dd13f2-2f0c-482d-b7ef-7de5fd1996a9", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fdc1a843-531a-47ca-bb86-3b1549345377"}, {"timestamp": "2026-02-02T12:28:36.637Z", "date_only": false, "value": "2026-02-02T12:28:36.637359Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fdc1a843-531a-47ca-bb86-3b1549345377", "record": "CVE-2020-27932", "field": "creation_timestamp", "uuid": "44aad363-7214-4939-afd0-4d137dbd8f05", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fdc1a843-531a-47ca-bb86-3b1549345377"}, {"timestamp": "2026-02-02T13:24:01Z", "date_only": false, "value": "2026-02-02T13:24:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2020-27932", "field": "timestamps.recorded_at", "uuid": "767de69b-4fe7-4362-9cab-2e9a50e01208", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-03-17T14:50:45.449Z", "date_only": false, "value": "2026-03-17T14:50:45.449297Z", "kind": "sighting", "label": "Seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=524", "record": "CVE-2020-27932", "field": "creation_timestamp", "uuid": "5ecf63b4-b290-4e5c-a0bb-1269b8393d4e", "url": "https://www.govcert.gov.hk/en/alerts_detail.php?id=524"}, {"timestamp": "2026-03-17T14:50:52.205Z", "date_only": false, "value": "2026-03-17T14:50:52.205000Z", "kind": "sighting", "label": "Seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/apple-julkaisi-korjaavia-kriittisia-paivityksia-ios-laitteiden-0-paivahaavoihin", "record": "CVE-2020-27932", "field": "creation_timestamp", "uuid": "87b83135-1ba0-49ff-ac03-f7dc683f02ea", "url": "https://www.kyberturvallisuuskeskus.fi/fi/apple-julkaisi-korjaavia-kriittisia-paivityksia-ios-laitteiden-0-paivahaavoihin"}, {"timestamp": "2026-06-17T03:09:53.783Z", "date_only": false, "value": "2026-06-17T03:09:53.783", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-27932", "record": "FKIE_CVE-2020-27932", "field": "lastModified"}, {"timestamp": "2026-06-19T12:47:55.601Z", "date_only": false, "value": "2026-06-19T12:47:55.601608Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f4ff74f5-4c30-478a-a0db-799a253baf5f", "record": "CVE-2020-27932", "field": "creation_timestamp", "uuid": "e9653ef8-13f6-4a4a-8912-a694ec9f6f7b", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f4ff74f5-4c30-478a-a0db-799a253baf5f"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2020-27932", "field": "timestamps.recorded_at", "uuid": "b9523f43-c3bc-43e6-85f4-bdbbbb4b066c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:13:23.736Z", "date_only": false, "value": "2026-06-23T11:13:23.736695Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/b9523f43-c3bc-43e6-85f4-bdbbbb4b066c", "record": "CVE-2020-27932", "field": "creation_timestamp", "uuid": "6fc89d37-a552-488f-8659-b281e3b93245", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/b9523f43-c3bc-43e6-85f4-bdbbbb4b066c"}, {"timestamp": "2026-06-23T14:04:47.961Z", "date_only": false, "value": "2026-06-23T14:04:47.961522Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/42ccf45f-126f-4b23-a105-1dc6bf700f46", "record": "CVE-2020-27932", "field": "creation_timestamp", "uuid": "84d1cfe9-b943-4392-8a09-cb8ed2c2dbe4", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/42ccf45f-126f-4b23-a105-1dc6bf700f46"}, {"timestamp": "2026-07-12T22:00:16.718Z", "date_only": false, "value": "2026-07-12T22:00:16.718566Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pleyades_it/7906", "record": "CVE-2020-27932", "field": "creation_timestamp", "uuid": "18629527-ea53-47c5-b89f-a2d9369ad24d", "url": "https://t.me/pleyades_it/7906"}, {"timestamp": "2026-07-13T00:00:40.559Z", "date_only": false, "value": "2026-07-13T00:00:40.559932Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pleyades_it/7906", "record": "CVE-2020-27932", "field": "creation_timestamp", "uuid": "f5861748-e933-45f3-b465-f9f6bdfcbeeb", "url": "https://t.me/pleyades_it/7906"}, {"timestamp": "2026-07-14T00:00:51.648Z", "date_only": false, "value": "2026-07-14T00:00:51.648720Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/pleyades_it/7906", "record": "CVE-2020-27932", "field": "creation_timestamp", "uuid": "dc1cadd0-1cfb-4430-8175-d5f2bae4b111", "url": "https://t.me/pleyades_it/7906"}, {"timestamp": "2026-09-01T17:00:58.130Z", "date_only": false, "value": "2026-09-01T17:00:58.130118Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/2629", "record": "CVE-2020-27932", "field": "creation_timestamp", "uuid": "89bd5c5f-1917-486f-a8a1-899e8c069040", "url": "https://t.me/cissp/2629"}, {"timestamp": "2026-09-01T17:01:08.606Z", "date_only": false, "value": "2026-09-01T17:01:08.606014Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/1993", "record": "CVE-2020-27932", "field": "creation_timestamp", "uuid": "e3014312-3efe-474d-b278-dfa30a85e3fa", "url": "https://t.me/cissp/1993"}, {"timestamp": "2026-09-01T18:00:05.707Z", "date_only": false, "value": "2026-09-01T18:00:05.707792Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hackersmeet0/2370", "record": "CVE-2020-27932", "field": "creation_timestamp", "uuid": "e0b6a3e4-3bed-4aac-96ce-ace33d27b462", "url": "https://t.me/hackersmeet0/2370"}, {"timestamp": "2026-09-08T21:00:03.576Z", "date_only": false, "value": "2026-09-08T21:00:03.576510Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hackersmeet0/2370", "record": "CVE-2020-27932", "field": "creation_timestamp", "uuid": "d4ce8b42-6804-441b-92cc-18f155bda56c", "url": "https://t.me/hackersmeet0/2370"}, {"timestamp": "2026-09-11T15:00:05.630Z", "date_only": false, "value": "2026-09-11T15:00:05.630361Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cissp/2629", "record": "CVE-2020-27932", "field": "creation_timestamp", "uuid": "fed3e853-fb7e-43a5-9a7a-5063ac8cef35", "url": "https://t.me/cissp/2629"}, {"timestamp": "2026-09-11T22:00:05.315Z", "date_only": false, "value": "2026-09-11T22:00:05.315757Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cissp/1993", "record": "CVE-2020-27932", "field": "creation_timestamp", "uuid": "ad374bdb-cfd0-410e-b4de-eae2b9e568f2", "url": "https://t.me/cissp/1993"}]}