CVE-2020-9859

7.8 highKEVEPSS 0.8%

High (7.8) in Apple Multiple Products. In CISA KEV since 2021-11-03. EPSS 0.8% chance of exploitation in the next 30 days.

A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.5.1 and iPadOS 13.5.1, macOS Catalina 10.15.5 Supplemental Update, tvOS 13.4.6, watchOS 6.2.6. An application may be able to execute arbitrary code with kernel privileges.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 57% of CVEs (scores of 2026-10-31)
CISA KEV: listed 2021-11-03, due 2022-05-03
CWE: CWE-415
Published: 2020-06-05
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

apple:ipados
apple:iphone_os
apple:mac_os_x
apple:tvos
apple:watchos

References

https://support.apple.com/HT211214
https://support.apple.com/HT211214
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-9859

Check your stack JSON