CVE-2020-9819VulnerabilityPublished 11/03/2021Updated 10/24/2026

CVE-2020-9819: Apple iOS, iPadOS, and watchOS Memory Corruption Vulnerability

Affects Apple iOS, iPadOS, and watchOSSource CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 11/03/2021
KEV deadline: 05/03/2022
EPSS: 2.2% chance of exploitation in 30 days – higher than 82% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

nvd.nist.gov/vuln/detail/CVE-2020-9819 (opens in a new tab)

Description

A memory corruption vulnerability exists in the Mail app on Apple iOS, iPadOS, and watchOS. This flaw may allow heap corruption when processing a specially crafted email message. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.

Summary

CVE-2020-9819 is a memory corruption vulnerability in Apple iOS, iPadOS, and watchOS Mail applications. The issue arises from improper handling of maliciously crafted mail messages, potentially leading to heap corruption. This vulnerability has been observed to be exploited in the wild, indicating active threat usage. The vulnerability is categorized under CWE-787 (Out-of-bounds Write). No explicit patch or remediation details are provided in the source data.

Impact

Successful exploitation of this vulnerability may allow an attacker to corrupt memory on the affected device, potentially leading to arbitrary code execution or denial of service. The presence of known exploits in the wild elevates the risk to users of affected Apple platforms. However, the exact impact depends on exploitation success and device context.

Mitigation

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Users and administrators should monitor official Apple security advisories for updates and apply any available patches promptly once released.

Weaknesses

CWE-787Out-of-bounds Write (opens in a new tab)

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 09:41:19 UTC

Weaknesses

References

Related threats