Rapid7

vulnerability

OS X update for Login Window (CVE-2020-29633)

Severity
7
CVSS
(AV:N/AC:L/Au:S/C:P/I:P/A:P)
Published
Feb 19, 2021
Added
Feb 19, 2021
Modified
Mar 27, 2026

Description

An authentication issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. An attacker in a privileged network position may be able to bypass authentication policy.

Solutions

apple-osx-security-update-2021-001-catalinaapple-osx-security-update-2021-001-mojaveapple-osx-upgrade-11_1apple-osx-upgrade-11_2
Title
Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.