CVE-2020-9907
Apple Multiple Products Memory Corruption Vulnerability
CVSS
—
No CVSS
EPSS
3.2%
p88
KEV
YES
Jun 27, 2022
Exploit Today
76
0-100
Published: — · Last modified: —
3.2%EPSS · 30 days3.9%
2026-09-172026-10-15
Product
Apple / Multiple Products
Vulnerability
Apple Multiple Products Memory Corruption Vulnerability
Added to KEV
Jun 27, 2022
Remediate by
Jul 18, 2022
Known ransomware use
No
Summary description
Apple iOS, iPadOS, and tvOS contain a memory corruption vulnerability that could allow an application to execute code with kernel privileges.
Required action
Apply updates per vendor instructions.
Notes
https://nvd.nist.gov/vuln/detail/CVE-2020-9907
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-869508.8 HIG68.7%
KEV—71Apple Multiple Products Out-of-Bounds Write Vulnerability14dCVE-2025-435298.8 HIG95.1%
KEV—79Apple Multiple Products Use-After-Free WebKit Vulnerability9dCVE-2025-435205.5 MED35.3%
KEV—61Apple Multiple Products Classic Buffer Overflow Vulnerability9dCVE-2025-435107.8 HIG27.6%
KEV—58Apple Multiple Products Improper Locking Vulnerability9dCVE-2023-430008.8 HIG90.5%
KEV—77Apple Multiple products Use-After-Free Vulnerability24dCVE-2025-312778.8 HIG75.4%
KEV—73Apple Multiple Products Buffer Overflow Vulnerability24d