First published: Wed Sep 16 2020(Updated: )
A use after free issue was addressed with improved memory management. This issue is fixed in Safari 14.0. Processing maliciously crafted web content may lead to arbitrary code execution.
Credit: cc Trend Micro Zero Day Initiativecc Trend Micro Zero Day InitiativeMarcin 'Icewall' Noga Cisco Taloscc Trend Micro Zero Day Initiativecc Trend Micro Zero Day InitiativeMarcin 'Icewall' Noga Cisco Taloscc Trend Micro Zero Day Initiativecc Trend Micro Zero Day InitiativeMarcin 'Icewall' Noga Cisco Taloscc Trend Micro Zero Day Initiativecc Trend Micro Zero Day InitiativeMarcin 'Icewall' Noga Cisco Talosan anonymous researcher cc Trend Micro Zero Day InitiativeMarcin 'Icewall' Noga Cisco TalosMarcin 'Icewall' Noga Cisco Talosan anonymous researcher cc Trend Micro Zero Day InitiativeMarcin 'Icewall' Noga Cisco Talos product-security@apple.com product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
Apple Safari | <14.0 | 14.0 |
Apple iCloud for Windows | <11.5 | 11.5 |
Apple iTunes for Windows | <12.10.9 | 12.10.9 |
Apple watchOS | <7.0 | 7.0 |
Apple tvOS | <14.0 | 14.0 |
Apple iOS | <14.0 | 14.0 |
Apple iPadOS | <14.0 | 14.0 |
Apple Icloud Windows | <11.5 | |
Apple Itunes Windows | <12.10.9 | |
Apple Safari | <14.0 | |
Apple iPadOS | <14.0 | |
Apple iPhone OS | <14.0 | |
Apple tvOS | <14.0 | |
Apple watchOS | <7.0 | |
Webkit Webkitgtk\+ | <=2.30.3 | |
Debian Debian Linux | =10.0 | |
IBM Cloud Pak for Security (CP4S) | <=1.7.2.0 | |
IBM Cloud Pak for Security (CP4S) | <=1.7.1.0 | |
IBM Cloud Pak for Security (CP4S) | <=1.7.0.0 | |
debian/webkit2gtk | 2.44.2-1~deb11u1 2.44.3-1~deb11u1 2.44.2-1~deb12u1 2.44.3-1~deb12u1 2.44.3-1 2.44.4-1 | |
debian/wpewebkit | 2.38.6-1~deb11u1 2.38.6-1 2.44.3-1 2.44.4-1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Appears in the following advisories)
(Found alongside the following vulnerabilities)
CVE-2020-9951 is a vulnerability in WebKit that allows for a use after free issue.
CVE-2020-9951 affects Apple iTunes for Windows (up to version 12.10.9), Apple iCloud for Windows (up to version 11.5), Apple watchOS (up to version 7.0), Apple iOS (up to version 14.0), Apple iPadOS (up to version 14.0), Apple Safari (up to version 14.0), and Apple tvOS (up to version 14.0).
To fix CVE-2020-9951, make sure to update your affected software to the recommended versions provided by Apple.
You can find more information about CVE-2020-9951 on the official Apple support page.
The severity of CVE-2020-9951 is not specified.