CVE-2020-27894: Apple macOS

Medium severity, CVSS 5.5. EPSS: 0.7% chance of exploitation in the next 30 days.

The issue was addressed with additional user controls. This issue is fixed in macOS Big Sur 11.0.1. Users may be unable to remove metadata indicating where files were downloaded from.

Affected products

• Apple macOS: from 11.0, before 11.0.1 (fixed in 11.0.1)

Published 2020-12-08. Last modified 2026-06-17.