CVE-2020-3837 — Apple Multiple Products Memory Corruption Vulnerability

provenance: imported · CVE: CVE-2020-3837

CVE-2020-3837: Apple Multiple Products Memory Corruption Vulnerability

CISA Known Exploited Vulnerability (KEV)


Vendor / project	Apple
Product	Multiple Products
Date added	2022-06-27
Due date	2022-07-18
Ransomware campaign use	Unknown

Description

Apple iOS, iPadOS, macOS, tvOS, and watchOS contain a memory corruption vulnerability that could allow an application to execute code with kernel privileges.

Required action (CISA)

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2020-3837

References

NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-3837
KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog