CVE-2020-27950
Apple Multiple Products Memory Initialization Vulnerability
CVSS
—
No CVSS
EPSS
16.5%
p97
KEV
YES
Nov 3, 2021
Exploit Today
79
0-100
Published: — · Last modified: —
16.5%EPSS · 30 days16.5%
2026-09-172026-10-15
Product
Apple / Multiple Products
Vulnerability
Apple Multiple Products Memory Initialization Vulnerability
Added to KEV
Nov 3, 2021
Remediate by
May 3, 2022
Known ransomware use
No
Summary description
Apple iOS, iPadOS, macOS, and watchOS contain a memory initialization vulnerability that may allow a malicious application to disclose kernel memory.
Required action
Apply updates per vendor instructions.
Notes
https://nvd.nist.gov/vuln/detail/CVE-2020-27950
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-869508.8 HIG68.7%
KEV—71Apple Multiple Products Out-of-Bounds Write Vulnerability15dCVE-2025-435298.8 HIG95.1%
KEV—79Apple Multiple Products Use-After-Free WebKit Vulnerability9dCVE-2025-435205.5 MED35.3%
KEV—61Apple Multiple Products Classic Buffer Overflow Vulnerability9dCVE-2025-435107.8 HIG27.6%
KEV—58Apple Multiple Products Improper Locking Vulnerability9dCVE-2023-430008.8 HIG90.5%
KEV—77Apple Multiple products Use-After-Free Vulnerability25dCVE-2025-312778.8 HIG75.4%
KEV—73Apple Multiple Products Buffer Overflow Vulnerability25d