CVE-2020-9830
Status: ModifiedHigh (7.8)—
A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5. An application may be able to execute arbitrary code with kernel privileges.
CVSS
- Version: 3.1
- Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- Base score: 7.8
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days: 1.03%
- Percentile among all scored CVEs: 63
- Score date: 10/8/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Affected technologies (3)
CWEs
- CWE-787
References
Raw JSON (NVD)
Show
{
"id": "CVE-2020-9830",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 9.3,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
"authentication": "NONE",
"integrityImpact": "COMPLETE",
"accessComplexity": "MEDIUM",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "COMPLETE"
},
"acInsufInfo": false,
"impactScore": 10,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 8.6,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": true
}
],
"cvssMetricV31": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 7.8,
"attackVector": "LOCAL",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "REQUIRED",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 1.8
}
]
},
"affected": [
{
"source": "product-security@apple.com",
"affectedData": [
{
"vendor": "Apple",
"product": "iOS",
"versions": [
{
"status": "affected",
"version": "unspecified",
"lessThan": "iOS 13.5 and iPadOS 13.5",
"versionType": "custom"
}
]
},
{
"vendor": "Apple",
"product": "macOS",
"versions": [
{
"status": "affected",
"version": "unspecified",
"lessThan": "macOS Catalina 10.15.5",
"versionType": "custom"
}
]
}
]
}
],
"published": "2020-06-09T17:15:14.097",
"references": [
{
"url": "https://support.apple.com/HT211170",
"tags": [
"Vendor Advisory"
],
"source": "product-security@apple.com"
},
{
"url": "https://support.apple.com/HT211170",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-787"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5. An application may be able to execute arbitrary code with kernel privileges."
},
{
"lang": "es",
"value": "Se abordó un problema de corrupción de la memoria con una administración de estado mejorada. Este problema es corregido en iOS versión 13.5 and iPadOS versión 13.5, macOS Catalina versión 10.15.5 Una aplicación puede ser capaz de ejecutar código arbitrario con privilegios de kernel"
}
],
"lastModified": "2026-06-17T03:28:38.950",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9145C3CB-429B-4FB8-A0AC-B543E9FFF938",
"versionEndExcluding": "13.5"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9C09256B-04A9-4D08-A791-8022B5AC5B14",
"versionEndExcluding": "13.5"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "760AE295-2E39-4DA3-A384-01A5D4A131AD",
"versionEndExcluding": "10.13.6",
"versionStartIncluding": "10.13"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6DE2B03F-94EE-4E32-B366-FE31A7031403",
"versionEndExcluding": "10.14.6",
"versionStartIncluding": "10.14"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ABAA703D-5FAB-4773-B4A2-759685B17ACB",
"versionEndExcluding": "10.15.5",
"versionStartIncluding": "10.15"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.13.6:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "297D2D0C-EA9D-4B2C-9357-D88DB6C7143A"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2018-002:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0D845143-1B4D-478B-B83E-8F1664CBCAC3"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2018-003:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "23C6DF6A-9A30-4F9E-BD9C-C19D8551C6DA"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2019-001:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "754A2DF4-8724-4448-A2AB-AC5442029CB7"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2019-002:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D392C777-1949-4920-B459-D083228E4688"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2019-003:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "68B0A232-F2A4-4B87-99EB-3A532DFA87DA"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2019-004:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0DF528F7-0F1E-4E55-A088-91327E3C360C"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2019-005:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E222445A-D398-47C8-9639-4BAE36B69AA1"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2019-006:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9425DAC8-038D-4B09-A074-3780AED912FA"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2019-007:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8EA63C1C-1EEC-4961-A7B7-439D21293B99"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2020-001:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B2F5D631-2306-4526-BEE5-22456D95ABAB"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2020-002:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F79B7361-F2F2-4FA6-A27D-CC8F2D37A726"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "693E7DAE-BBF0-4D48-9F8A-20DDBD4AAC0C"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-001:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CFE26ECC-A2C2-4501-9950-510DE0E1BD86"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-002:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "26108BEF-0847-4AB0-BD98-35344DFA7835"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-004:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A369D48B-6A0A-47AE-9513-D5E2E6F30931"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-005:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "510F8317-94DA-498E-927A-83D5F41AF54A"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-006:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0D5D1970-6D2A-42CA-A203-42023D71730D"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-007:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C68AE52B-5139-40A4-AE9A-E752DBF07D1B"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0FD3467D-7679-479F-9C0B-A93F7CD0929D"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D4C6098E-EDBD-4A85-8282-B2E9D9333872"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-003:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "518BB47B-DD76-4E8C-9F10-7EBC1E146191"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "product-security@apple.com"
}