cbcvebase.
CVE-2020-9785
published 2020-04-01

CVE-2020-9785: Multiple memory corruption issues were addressed with improved state management. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS…

PriorityP339high7.8CVSS 3.1
AVLACLPRNUIRSUCHIHAH
EPSS
1.28%
67.1th percentile
Multiple memory corruption issues were addressed with improved state management. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2. A malicious application may be able to execute arbitrary code with kernel privileges.

Affected

9 ranges
VendorProductVersion rangeFixed in
appleios>= unspecified < iOS 13.4 and iPadOS 13.4iOS 13.4 and iPadOS 13.4
appleipados< 13.413.4
appleiphone_os< 13.413.4
applemac_os_x< 10.15.410.15.4
applemacos>= unspecified < macOS Catalina 10.15.4macOS Catalina 10.15.4
appletvos< 13.413.4
appletvos>= unspecified < tvOS 13.4tvOS 13.4
applewatchos< 6.26.2
applewatchos>= unspecified < watchOS 6.2watchOS 6.2

CVSS provenance

nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv2.09.3CRITICALAV:N/AC:M/Au:N/C:C/I:C/A:C
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.