Live › vulnerability › CVE-2020-3837
Go to dashboardA memory corruption bug in Apple's iOS, iPadOS, macOS, tvOS and watchOS lets an app running on the device execute code with kernel privileges. CISA lists it as actively exploited in the wild.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Apple Multiple Products | vendor | – | – |
| apple ipados | vendor | < 13.3.1 | 13.3.1 |
| apple iphone os | vendor | < 13.3.1 | 13.3.1 |
| apple mac os x | vendor | < 10.15.3 | 10.15.3 |
| apple tvos | vendor | < 13.3.1 | 13.3.1 |
| apple watchos | vendor | < 6.1.2 | 6.1.2 |
Check the OS version on each Apple device (Settings > General > About on iOS/iPadOS, or Apple menu > About This Mac on macOS) and compare it to the fixed release in Apple's advisory.
Update the affected Apple devices to a current OS release per Apple's security advisory; the fixed version numbers are not in the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. An application may be able to execute arbitrary code with kernel privileges.
This page as .md · .json · in your agent: get_signal("CVE-2020-3837")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.