CVE-2020-9859

Timeline

Detection, updates, and resolution for this record.

1. Jun 5, 2020 · Catalog

   Detected

   A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.5.1 and iPadOS 13.5.1, macOS Catalina 10.15.5 Supplemental Update, tvOS 13.4.6, watchOS 6.2.6. An application may be able to execute arbitrary code with kernel privileges.

2. Nov 3, 2021 · CISA KEV

   Known exploited

   Apply updates per vendor instructions.

3. May 3, 2022 · CISA KEV

   Remediation due

   Apply updates per vendor instructions.

4. Jun 16, 2026 · Catalog

   Updated

   A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.5.1 and iPadOS 13.5.1, macOS Catalina 10.15.5 Supplemental Update, tvOS 13.4.6, watchOS 6.2.6. An application may be able to execute arbitrary code with kernel privileges.

Affected

• cpe apple/ipadosversion unspecified
• cpe apple/iphone osversion unspecified
• cpe apple/mac os xversion unspecified
• cpe apple/tvosversion unspecified
• cpe apple/watchosversion unspecified
• vendor Apple Multiple Productsversion unspecified

Sources

• CISA KEVCVE-2020-9859

  Apple iOS, iPadOS, macOS, watchOS, and tvOS contain an unspecified vulnerability that may allow an application to execute code with kernel privileges.

  cisa.gov
• CVE.orgCVE-2020-9859

  Official CVE identifier

  cve.org
• FIRST EPSSCVE-2020-9859

  30-day exploitation probability 0.8%

  first.org
• NIST NVDCVE-2020-9859

  A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.5.1 and iPadOS 13.5.1, macOS Catalina 10.15.5 Supplemental Update, tvOS 13.4.6, watchOS 6.2.6. An application may be able to execute arbitrary code with kernel privileges.

  nvd.nist.gov

References

• CISA note · nvd.nist.gov
• Release Notes · support.apple.com
• US Government Resource · cisa.gov