{"id":"CVE-2020-3837","kind":"vulnerability","aliases":["CVE-2020-3837"],"related":[],"title":"A memory corruption issue was addressed with improved memory handling","description":"A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. An application may be able to execute arbitrary code with kernel privileges.","summary":"A memory corruption bug in Apple's iOS, iPadOS, macOS, tvOS and watchOS lets an app running on the device execute code with kernel privileges. CISA lists it as actively exploited in the wild.","severity":"critical","cvss":9.3,"epss":0.14839,"exploited":true,"exploited_at":"2022-06-27T00:00:00+00:00","products":[{"name":"Apple Multiple Products","fixed":[],"affected":"","ecosystem":"vendor"},{"name":"apple ipados","fixed":["13.3.1"],"affected":"< 13.3.1","ecosystem":"vendor"},{"name":"apple iphone os","fixed":["13.3.1"],"affected":"< 13.3.1","ecosystem":"vendor"},{"name":"apple mac os x","fixed":["10.15.3"],"affected":"< 10.15.3","ecosystem":"vendor"},{"name":"apple tvos","fixed":["13.3.1"],"affected":"< 13.3.1","ecosystem":"vendor"},{"name":"apple watchos","fixed":["6.1.2"],"affected":"< 6.1.2","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["apple-devices","exploited","infrastructure","ios","ipados","macos","tvos","watchos"],"not_affected_if":["fully-patched-devices"],"how_to_check":"Check the OS version on each Apple device (Settings > General > About on iOS/iPadOS, or Apple menu > About This Mac on macOS) and compare it to the fixed release in Apple's advisory.","fix":"Update the affected Apple devices to a current OS release per Apple's security advisory; the fixed version numbers are not in the sources.","status":"open","published_at":"2020-02-27T21:15:16+00:00","first_seen_at":"2026-10-23T19:11:52+00:00","triaged_at":"2026-10-23T21:12:27+00:00","updated_at":"2026-10-23T22:29:04+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-10-23T21:12:27Z","model":"claude-haiku-5-5","output":{"fix":"Update the affected Apple devices to a current OS release per Apple's security advisory; the fixed version numbers are not in the sources.\nunknown","reach":"local","impact":"high","summary":"A memory corruption bug in Apple's iOS, iPadOS, macOS, tvOS and watchOS lets an app running on the device execute code with kernel privileges. CISA lists it as actively exploited in the wild.","category":"infrastructure","who_cares":["ios","ipados","macos","tvos","watchos","apple-devices"],"confidence":0.6,"needs_auth":"no","worst_case":"Malicious app gains kernel privileges and full control of the device","analyst_note":"Find Apple's security advisory for CVE-2020-3837 to get the fixed OS versions and the exact affected releases; the sources give no version data.","how_to_check":"Check the OS version on each Apple device (Settings > General > About on iOS/iPadOS, or Apple menu > About This Mac on macOS) and compare it to the fixed release in Apple's advisory.\nunknown","needs_analyst":true,"not_affected_if":["fully-patched-devices"],"user_interaction":"no","needs_special_setup":"no","severity_if_unknown":"high"},"cost_usd":0.000497,"input_tokens":2838,"output_tokens":426,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2020':12A,15A '-3837':13A,16A '10.15.3':99C '13.3.1':93C,96C,101C '6.1.2':103C 'abl':108C 'activ':72B 'address':6A,82C 'app':58B 'appl':34B,48B 'apple':17A,20A,22A,25A,29A,31A 'apple-devic':33B 'applic':105C 'arbitrari':111C 'bug':46B 'catalina':98C 'cisa':68B 'code':64B,112C 'corrupt':3A,45B,79C 'cve':11A,14A 'devic':35B,62B 'execut':63B,110C 'exploit':36B,73B 'fix':90C 'handl':10A,86C 'improv':8A,84C 'infrastructur':37B 'io':38B,50B,92C 'ipado':39B,51B,95C 'ipados':21A 'iphone':23A 'issu':4A,80C,88C 'kernel':66B,114C 'let':56B 'list':69B 'mac':26A 'maco':40B,52B,97C 'may':106C 'memori':2A,9A,44B,78C,85C 'multiple':18A 'os':24A,27A 'privileg':67B,115C 'products':19A 'run':59B 'tvos':30A,41B,53B,100C 'watcho':42B,55B,102C 'watchos':32A 'wild':76B 'x':28A","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2020-02-27T21:15:16+00:00","kev":{"dateAdded":"2022-06-27","dueDate":"2022-07-18","requiredAction":"Apply updates per vendor instructions.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2020-3837","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-3837","severity":null,"published_at":"2022-06-27T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:52+00:00","fetched_at":"2026-10-25T14:39:39+00:00","note":null},{"source":"epss","external_id":"CVE-2020-3837","url":"https://api.first.org/data/v1/epss?cve=CVE-2020-3837","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-23T19:13:45+00:00","fetched_at":"2026-10-23T19:13:45+00:00","note":null},{"source":"nvd","external_id":"CVE-2020-3837","url":"https://nvd.nist.gov/vuln/detail/CVE-2020-3837","severity":null,"published_at":"2020-02-27T21:15:16+00:00","modified_at":"2026-06-17T03:19:07+00:00","first_seen_at":"2026-10-23T22:29:04+00:00","fetched_at":"2026-10-23T22:29:04+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}