CVE-2020-3868

CVE-2020-3868: vulnerability in Apple iOS

Published 27 Feb 2020 · Updated 04 Aug 2024

Follow this CVE + Monitor iOS + Monitor tvOS

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 2.7%

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. Processing maliciously crafted web content may lead to arbitrary code execution.

Affected products

Apple · iCloud for Windows Apple · iCloud for Windows (Legacy)Apple · iOS Apple · iTunes for Windows Apple · Safari Apple · tvOS

Related CVEs — Apple iOS

In the same product, most dangerous first.

CVE-2021-30860HIGHCVE-2021-30860EPSS 76.0%KEV CVE-2019-8605HIGHCVE-2019-8605EPSS 17.6%KEV CVE-2019-8506HIGHCVE-2019-8506EPSS 16.2%KEV CVE-2019-7286HIGHCVE-2019-7286EPSS 15.9%KEV CVE-2020-3837HIGHCVE-2020-3837EPSS 14.8%KEV CVE-2021-30858HIGHCVE-2021-30858EPSS 13.4%KEV

References

http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00004.html https://security.gentoo.org/glsa/202003-22 https://support.apple.com/HT210920 https://support.apple.com/HT210947 https://support.apple.com/HT210948