CVE-2020-9859
Apple Multiple Products Code Execution Vulnerability
CVSS
—
No CVSS
EPSS
0.8%
p57
KEV
YES
Nov 3, 2021
Exploit Today
67
0-100
Published: — · Last modified: —
0.8%EPSS · 30 days0.8%
2026-09-172026-10-15
Product
Apple / Multiple Products
Vulnerability
Apple Multiple Products Code Execution Vulnerability
Added to KEV
Nov 3, 2021
Remediate by
May 3, 2022
Known ransomware use
No
Summary description
Apple iOS, iPadOS, macOS, watchOS, and tvOS contain an unspecified vulnerability that may allow an application to execute code with kernel privileges.
Required action
Apply updates per vendor instructions.
Notes
https://nvd.nist.gov/vuln/detail/CVE-2020-9859
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-869508.8 HIG68.7%
KEV—71Apple Multiple Products Out-of-Bounds Write Vulnerability15dCVE-2025-435298.8 HIG95.1%
KEV—79Apple Multiple Products Use-After-Free WebKit Vulnerability9dCVE-2025-435205.5 MED35.3%
KEV—61Apple Multiple Products Classic Buffer Overflow Vulnerability9dCVE-2025-435107.8 HIG27.6%
KEV—58Apple Multiple Products Improper Locking Vulnerability9dCVE-2023-430008.8 HIG90.5%
KEV—77Apple Multiple products Use-After-Free Vulnerability25dCVE-2025-312778.8 HIG75.4%
KEV—73Apple Multiple Products Buffer Overflow Vulnerability25d