CVE-2020-9801

CVE-2020-9801: vulnerability in Apple Safari

Published · Updated

18Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 1.4%
from disclosure to weapon0 days
Published on NVDJun 9
metasploitMar 18
exploitation probability
1.4%top 29% of all CVEs
observed exploitation
nono source reports it
A logic issue was addressed with improved restrictions. This issue is fixed in Safari 13.1.1. A malicious process may cause Safari to launch an application.
Affected products
Apple · Safari
Related CVEs — Apple Safari

In the same product, most dangerous first.

CVE-2023-28205HIGHCVE-2023-28205EPSS 27.1%KEVCVE-2023-32439HIGHCVE-2023-32439EPSS 24.0%KEVCVE-2023-32435HIGHCVE-2023-32435EPSS 23.0%KEVCVE-2024-44309MEDIUMCVE-2024-44309EPSS 22.6%KEVCVE-2023-37450HIGHCVE-2023-37450EPSS 18.9%KEVCVE-2023-42916MEDIUMCVE-2023-42916EPSS 17.8%KEV
References
https://support.apple.com/HT211177