Live › vulnerability › CVE-2020-9859
Go to dashboardApple iOS, iPadOS, macOS, watchOS and tvOS contain an unspecified flaw that lets an application execute code with kernel privileges. An attacker who can run an app on the device can take full control of the operating system.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Apple Multiple Products | vendor | – | – |
Check the installed OS version on each Apple device (macOS: About This Mac; iOS/iPadOS: Settings > General > About) and compare it with the patched release listed in Apple's security notes.
Update iOS, iPadOS, macOS, watchOS and tvOS to a release that includes Apple's fix for CVE-2020-9859, as CISA directs.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.5.1 and iPadOS 13.5.1, macOS Catalina 10.15.5 Supplemental Update, tvOS 13.4.6, watchOS 6.2.6. An application may be able to execute arbitrary code with kernel privileges.
This page as .md · .json · in your agent: get_signal("CVE-2020-9859")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.