7.8 High Exploited

CVE-2020-9907 Apple Multiple Products Memory Corruption Vulnerability

Active exploitation observed

· CISA KEV catalogue

Required action Apply updates per vendor instructions.

Ransomware campaigns Not observed so far

Weakness CWE-787

Description

A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8. An application may be able to execute arbitrary code with kernel privileges.

Affected products and versions

Product	Affected versions	Fixed in
iOS	Versions not published
tvOS	Versions not published

References

support.apple.com support.apple.com
support.apple.com support.apple.com

Timeline

Published October 16, 2020
Added to the KEV catalogue June 27, 2022
Last modified October 21, 2025

The 507 CVEs of iOS →

CVE-2024-44229 An information leakage was addressed with additional validation 5.3 Medium CVE-2024-44218 This issue was addressed with improved checks 7.8 High CVE-2024-40867 A custom URL scheme handling issue was addressed with improved input validation 8.8 High CVE-2024-44259 This issue was addressed through improved state management 8.8 High

Track this CVE