Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.8
CVE-2020-9907: iOS, iPadOS, tvOS could let apps gain system control
CVE-2020-9907 · published 6 years ago · actively exploited
Summary
Apple's iOS, iPadOS, and tvOS have a flaw that could let a malicious app run with the highest system privileges. This could let the app take control of the device or access sensitive data. Install the latest software updates from Apple as soon as they are available to protect your devices.
What to do
- Update apple ipados to version 13.6 or later.
- Update apple iphone_os to version 13.6 or later.
- Update apple tvos to version 13.4.8 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| apple | multiple products | All versions |
| apple | ipados |
< 13.6 cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* |
| apple | iphone_os |
< 13.6 cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* |
| apple | tvos |
< 13.4.8 cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:* |
Original advisory text
Apple Multiple Products Memory Corruption Vulnerability
Apple iOS, iPadOS, and tvOS contain a memory corruption vulnerability that could allow an application to execute code with kernel privileges.
References
- https://support.apple.com/HT211288 Release Notes Vendor Advisory
- https://support.apple.com/HT211290 Release Notes Vendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-... US Government Resource
Internet-facing
3 days
and check for signs of compromise
Internal
14 days
- Known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker full control
Severity
7.8
High
Known exploited
Listed in the CISA KEV catalogue - exploitation confirmed in the wild.
3%
chance of attack within 30 days
Type
CWE-787Out-of-bounds Write
Timeline
Published16 Oct 2020
Updated31 Oct 2026
First seen6 Mar 2026
Track software like this
Free during beta