TRIADA
Back to live map

CVE-2020-27950

KEVApple Multiple Products Memory Initialization Vulnerability
Description

Apple iOS, iPadOS, macOS, and watchOS contain a memory initialization vulnerability that may allow a malicious application to disclose kernel memory.

Publishedn/a
Last modifiedn/a
Added to KEVNov 3, 2021
Remediation dueMay 3, 2022
0 recent articles mention this CVE
    30
    Risk assessment · Low

    Actively exploited. Patch immediately.

    Exploitation
    Confirmed in the wild (CISA KEV)
    Federal remediation deadline
    Overdue by 1637 days
    CVSS
    Not yet scored by NVD
    Recommended actions
    1. 1.Apply updates per vendor instructions.
    2. 2.Treat as emergency change: patch or isolate internet-facing instances first.
    3. 3.Hunt for compromise: review logs for the disclosure window, not just from the patch date.

    Assessment is derived automatically from the live signals above; verify against your own asset inventory.