CVE-2020-3865

—

CVSS 3.1

8.8 high

EPSS

2%p78

Published

Feb 27, 2020 (Feb 27, 2020)

Modified

Jun 17, 2026

Description

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendors: apple opensuse
Products: icloud, itunes, safari, ipados, iphone os, tvos, leap
Weakness: CWE-787
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.9%)

In the news1 stories

How Just Visiting A Site Could Have Hacked Your iPhone or MacBook Camera

The Hacker NewsJan 31, 05:24 UTC · Jan 31, 2022Exploit / PoC CVE-2020-3852 CVE-2020-3864 CVE-2020-3865+4 CVEs