Loading vulnerability…
Kernel Privilege Escalation via Memory Corruption in Apple OSes
CVE-2020-3837 is a memory corruption vulnerability in Apple operating systems (iOS, iPadOS, macOS, tvOS, watchOS) that allows an application to execute arbitrary code with kernel privileges. The vulnerability is due to improper memory handling in the kernel, which could be exploited by a malicious application to gain elevated privileges.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation allows an attacker to execute arbitrary code with kernel privileges, potentially leading to full device compromise, privilege escalation, and persistence.
If you can’t patch tonight, do this now.
Restrict installation of untrusted applications and apply the latest security updates as soon as possible. Monitor for unusual application behavior that may indicate exploitation attempts.
Patch, then assume compromise.
Upgrade to iOS 13.3.1, iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, or watchOS 6.1.2, where the issue has been addressed with improved memory handling.
No validated public exploits yet. Hidden: 1 not yet analyzed, such as Exploit-DB entries.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
1 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.