CVE-2020-27950

Apple's memory initialization flaw in iOS, iPadOS, macOS, and watchOS allowed malicious apps to leak kernel memory, and it was actively exploited in the wild.

A memory initialization vulnerability in Apple's operating systems allowed a malicious application to disclose kernel memory, which was actively exploited in the wild. DIB organizations must ensure all Apple devices are patched immediately, as unpatched systems can lead to data exfiltration and compliance violations under NIST 800-171. The failure is avoidable through timely patching and highlights the risk of relying on unpatched vendor software.

Shame score — The vulnerability was actively exploited in the wild (KEV) and allowed kernel memory disclosure, indicating a severe, avoidable failure due to delayed patching or insufficient hardening.