nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2020-9907 CVE-2020-9907
HIGHCISA KEV
Apple Multiple Products Memory Corruption Vulnerability
Record summary
CVE-2020-9907 has a selected CVSS score of 7.8 (high). CISA lists CVE-2020-9907 in KEV.
Description
A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8. An application may be able to execute arbitrary code with kernel privileges.
Description source: CVE List
Exploitation context
Known exploitation
- CISA KEV
- Listed · Jun 27, 2022 · CISA
- VulnCheck KEV
- Listed · Jun 23, 2022 · VulnCheck
- Reported exploitation
- Observed · VulnCheck
CISA SSVC decision
ExploitationActive
AutomatableNo
Technical impactTotal
CISA Coordinator · SSVC 2.0.3 · Evaluated Jan 29, 2025 · Source: CVE List
Affected products and versions
3| Product | Source | Version range | Status |
|---|---|---|---|
Multiple ProductsBrowse Apple / Multiple Products | CISA | Version data not supplied | |
| CVE List | Before iOS 13.6 and iPadOS 13.6 | affected | |
| CVE List | Before tvOS 13.4.8 | affected | |
References
4support.apple.com
https://support.apple.com/HT211288 support.apple.com
https://support.apple.com/HT211290 cisa.govGovernment resource
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-9907