VULNERABILITY INTELLIGENCE

CVE-2020-9907

CVSS score7.8 HIGH
EPSS probability3.20%
CISA KEVKnown exploited vulnerability
Published2020-10-16
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Known Exploited Vulnerability

Apple Multiple Products Memory Corruption Vulnerability

Vendor / product: Apple / Multiple Products

Description

A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8. An application may be able to execute arbitrary code with kernel privileges.

Weakness classification

  • CWE-787: Out-of-bounds Write

Primary references