CVE-2020-9951

CVE-2020-9951: vulnerability in Apple Safari

Published 16 Oct 2020 · Updated 04 Aug 2024

Follow this CVE + Monitor Safari + Monitor webkit2gtk

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 2.3%

A use after free issue was addressed with improved memory management. This issue is fixed in Safari 14.0. Processing maliciously crafted web content may lead to arbitrary code execution.

Affected products

Apple · Safari

Related CVEs — Apple Safari

In the same product, most dangerous first.

CVE-2023-28205HIGHCVE-2023-28205EPSS 27.1%KEV CVE-2025-43529HIGHCVE-2025-43529EPSS 25.7%KEV CVE-2023-32439HIGHCVE-2023-32439EPSS 24.0%KEV CVE-2023-32435HIGHCVE-2023-32435EPSS 23.0%KEV CVE-2024-44309MEDIUMCVE-2024-44309EPSS 21.9%KEV CVE-2023-37450HIGHCVE-2023-37450EPSS 18.9%KEV

References

http://seclists.org/fulldisclosure/2020/Nov/18 http://seclists.org/fulldisclosure/2020/Nov/19 http://seclists.org/fulldisclosure/2020/Nov/20 http://seclists.org/fulldisclosure/2020/Nov/22 https://security.gentoo.org/glsa/202012-10 https://support.apple.com/HT211845 https://support.apple.com/kb/HT211843 https://support.apple.com/kb/HT211844 https://support.apple.com/kb/HT211850 https://support.apple.com/kb/HT211935 https://support.apple.com/kb/HT211952 https://www.debian.org/security/2020/dsa-4797