CVE-2020-9819

A memory corruption vulnerability in Apple's Mail app allowed heap corruption when processing malicious emails, listed in CISA's KEV catalog.

This unpatched memory corruption flaw in iOS, iPadOS, and watchOS Mail could be exploited via malicious email attachments, enabling remote code execution. DIB organizations must ensure all Apple devices are patched and monitor for exploitation attempts, as this vulnerability was actively exploited in the wild.

Shame score — Apple failed to patch a known memory corruption vulnerability before it was actively exploited in the wild, demonstrating negligence in patch management despite the severity of the flaw.