CVE-2020-3837
Apple Multiple Products Memory Corruption Vulnerability
Published Feb 27, 2020 · updated Jun 16, 2026 · apple ipados
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. An application may be able to execute arbitrary code with kernel privileges.
Timeline
Detection, updates, and resolution for this record.
Feb 27, 2020 · Catalog
Detected
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. An application may be able to execute arbitrary code with kernel privileges.
Jun 27, 2022 · CISA KEV
Known exploited
Apply updates per vendor instructions.
Jul 18, 2022 · CISA KEV
Remediation due
Apply updates per vendor instructions.
Jun 16, 2026 · Catalog
Updated
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. An application may be able to execute arbitrary code with kernel privileges.
Required action
Apply updates per vendor instructions.
CISA due date Jul 18, 2022
Affected
- cpe apple/ipadosversion unspecified
- cpe apple/iphone osversion unspecified
- cpe apple/mac os xversion unspecified
- cpe apple/tvosversion unspecified
- cpe apple/watchosversion unspecified
- vendor Apple Multiple Productsversion unspecified
Sources
- CISA KEVCVE-2020-3837
Apple iOS, iPadOS, macOS, tvOS, and watchOS contain a memory corruption vulnerability that could allow an application to execute code with kernel privileges.
cisa.gov - CVE.orgCVE-2020-3837
Official CVE identifier
cve.org - FIRST EPSSCVE-2020-3837
30-day exploitation probability 14.8%
first.org - Exploit Database48035
Public archive entry. The exploit body is not stored here.
exploit-db.com - NIST NVDCVE-2020-3837
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. An application may be able to execute arbitrary code with kernel privileges.
nvd.nist.gov