CVE-2020-9951

A use after free issue was addressed with improved memory management. This issue is fixed in Safari 14.0. Processing maliciously crafted web content may lead to arbitrary code execution.

Link	Resource
https://support.apple.com/HT211845	Release Notes Vendor Advisory
https://support.apple.com/kb/HT211843	Vendor Advisory
https://support.apple.com/kb/HT211850	Vendor Advisory
https://support.apple.com/kb/HT211844	Vendor Advisory
https://support.apple.com/kb/HT211952	Vendor Advisory
http://seclists.org/fulldisclosure/2020/Nov/19	Mailing List Third Party Advisory
http://seclists.org/fulldisclosure/2020/Nov/18	Mailing List Third Party Advisory
http://seclists.org/fulldisclosure/2020/Nov/22	Mailing List Third Party Advisory
http://seclists.org/fulldisclosure/2020/Nov/20	Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2020/11/23/3	Mailing List Third Party Advisory
https://www.debian.org/security/2020/dsa-4797	Third Party Advisory
https://support.apple.com/kb/HT211935	Vendor Advisory
https://security.gentoo.org/glsa/202012-10	Third Party Advisory

Configuration 1

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:* cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:* cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:* cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* cpe:2.3:a:apple:icloud:*:*:*:*:*:windows:*:* cpe:2.3:a:apple:itunes:*:*:*:*:*:windows:*:* cpe:2.3:a:webkit:webkitgtk+:*:*:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

---

Published : 2020-10-16 05:15

Updated : 2022-07-23 10:14

---

NVD link : CVE-2020-9951

Mitre link : CVE-2020-9951

No products.

CWE-416