CVE-2020-9951

CVE-2020-9951: fallo en Apple Safari

Publicada el 16 oct 2020 · Actualizada el 04 ago 2024

Seguir esta CVE + Monitorear Safari + Monitorear webkit2gtk

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

3Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackepss 2.3%

A use after free issue was addressed with improved memory management. This issue is fixed in Safari 14.0. Processing maliciously crafted web content may lead to arbitrary code execution.

Productos afectados

Apple · Safari

CVEs relacionadas — Apple Safari

En el mismo producto, de las más peligrosas a las menos.

CVE-2023-28205HIGHCVE-2023-28205EPSS 27.1%KEV CVE-2025-43529HIGHCVE-2025-43529EPSS 25.7%KEV CVE-2023-32439HIGHCVE-2023-32439EPSS 24.0%KEV CVE-2023-32435HIGHCVE-2023-32435EPSS 23.0%KEV CVE-2024-44309MEDIUMCVE-2024-44309EPSS 21.9%KEV CVE-2023-37450HIGHCVE-2023-37450EPSS 18.9%KEV

Referencias

http://seclists.org/fulldisclosure/2020/Nov/18 http://seclists.org/fulldisclosure/2020/Nov/19 http://seclists.org/fulldisclosure/2020/Nov/20 http://seclists.org/fulldisclosure/2020/Nov/22 https://security.gentoo.org/glsa/202012-10 https://support.apple.com/HT211845 https://support.apple.com/kb/HT211843 https://support.apple.com/kb/HT211844 https://support.apple.com/kb/HT211850 https://support.apple.com/kb/HT211935 https://support.apple.com/kb/HT211952 https://www.debian.org/security/2020/dsa-4797