CVE-2020-9907
Apple Multiple Products Memory Corruption Vulnerability
Published Oct 16, 2020 · updated Jun 16, 2026 · apple ipados
A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8. An application may be able to execute arbitrary code with kernel privileges.
Timeline
Detection, updates, and resolution for this record.
Oct 16, 2020 · Catalog
Detected
A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8. An application may be able to execute arbitrary code with kernel privileges.
Jun 27, 2022 · CISA KEV
Known exploited
Apply updates per vendor instructions.
Jul 18, 2022 · CISA KEV
Remediation due
Apply updates per vendor instructions.
Jun 16, 2026 · Catalog
Updated
A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8. An application may be able to execute arbitrary code with kernel privileges.
Required action
Apply updates per vendor instructions.
CISA due date Jul 18, 2022
Affected
- cpe apple/ipadosversion unspecified
- cpe apple/iphone osversion unspecified
- cpe apple/tvosversion unspecified
- vendor Apple Multiple Productsversion unspecified
Sources
- CISA KEVCVE-2020-9907
Apple iOS, iPadOS, and tvOS contain a memory corruption vulnerability that could allow an application to execute code with kernel privileges.
cisa.gov - CVE.orgCVE-2020-9907
Official CVE identifier
cve.org - FIRST EPSSCVE-2020-9907
30-day exploitation probability 3.2%
first.org - NIST NVDCVE-2020-9907
A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8. An application may be able to execute arbitrary code with kernel privileges.
nvd.nist.gov