CVE-2020-3837
Apple Multiple Products Memory Corruption Vulnerability
CVSS
—
No CVSS
EPSS
14.8%
p97
KEV
YES
Jun 27, 2022
Exploit Today
79
0-100
Published: — · Last modified: —
14.7%EPSS · 30 days16.1%
2026-09-172026-10-15
Product
Apple / Multiple Products
Vulnerability
Apple Multiple Products Memory Corruption Vulnerability
Added to KEV
Jun 27, 2022
Remediate by
Jul 18, 2022
Known ransomware use
No
Summary description
Apple iOS, iPadOS, macOS, tvOS, and watchOS contain a memory corruption vulnerability that could allow an application to execute code with kernel privileges.
Required action
Apply updates per vendor instructions.
Notes
https://nvd.nist.gov/vuln/detail/CVE-2020-3837
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-869508.8 HIG68.7%
KEV—71Apple Multiple Products Out-of-Bounds Write Vulnerability15dCVE-2025-435298.8 HIG95.1%
KEV—79Apple Multiple Products Use-After-Free WebKit Vulnerability9dCVE-2025-435205.5 MED35.3%
KEV—61Apple Multiple Products Classic Buffer Overflow Vulnerability9dCVE-2025-435107.8 HIG27.6%
KEV—58Apple Multiple Products Improper Locking Vulnerability9dCVE-2023-430008.8 HIG90.5%
KEV—77Apple Multiple products Use-After-Free Vulnerability25dCVE-2025-312778.8 HIG75.4%
KEV—73Apple Multiple Products Buffer Overflow Vulnerability25d