返回 CVE 瀏覽器

CVE-2020-3837

Known Exploited (CISA KEV)HIGH

7.8

CVSS Severity Score

EPSS Score67.8850%

EPSS Percentile93.11th

Published2020年2月27日

Last Modified2025年10月23日

Vulnerability Description

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. An application may be able to execute arbitrary code with kernel privileges.

Affected Platforms (CPE)

💻

Apple

Ipados

< 13.3.1

💻

Apple

Iphone Os

< 13.3.1

💻

Apple

Mac Os X

< 10.15.3

💻

Apple

Tvos

< 13.3.1

💻

Apple

Watchos

< 6.1.2

References & Advisories

🔗 https://support.apple.com/HT210918

🔗 https://support.apple.com/HT210919

🔗 https://support.apple.com/HT210920

🔗 https://support.apple.com/HT210921

🔗 https://support.apple.com/HT210918

🔗 https://support.apple.com/HT210919

🔗 https://support.apple.com/HT210920

🔗 https://support.apple.com/HT210921

相關漏洞威脅

CVE-2019-877910.0

A logic issue applied the incorrect restrictions. This issue was addressed by updating the logic to apply the correct restrictions...

CVE-2020-39109.8

A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10....

CVE-2020-39099.8

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10....

CVE-2020-39119.8

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10....