First published: Wed Sep 16 2020(Updated: )
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Safari 14.0. Processing maliciously crafted web content may lead to code execution.
Credit: zhunki zhunki zhunki zhunki zhunki zhunki product-security@apple.com product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
Apple Safari | <14.0 | 14.0 |
Apple iTunes for Windows | <12.10.9 | 12.10.9 |
Apple iCloud for Windows | <11.5 | 11.5 |
Apple watchOS | <7.0 | 7.0 |
Apple tvOS | <14.0 | 14.0 |
Apple iOS | <14.0 | 14.0 |
Apple iPadOS | <14.0 | 14.0 |
Apple Icloud Windows | =11.5 | |
Apple Itunes Windows | =12.10.9 | |
Apple Safari | <14.0 | |
Apple iPadOS | <14.0 | |
Apple iPhone OS | <14.0 | |
Apple tvOS | =14.0 | |
Apple watchOS | =7.0 | |
Fedoraproject Fedora | =32 | |
Fedoraproject Fedora | =33 | |
IBM Cloud Pak for Security (CP4S) | <=1.7.2.0 | |
IBM Cloud Pak for Security (CP4S) | <=1.7.1.0 | |
IBM Cloud Pak for Security (CP4S) | <=1.7.0.0 | |
debian/webkit2gtk | 2.44.2-1~deb11u1 2.44.3-1~deb11u1 2.44.2-1~deb12u1 2.44.3-1~deb12u1 2.44.3-1 2.44.4-1 | |
debian/wpewebkit | 2.38.6-1~deb11u1 2.38.6-1 2.44.3-1 2.44.4-1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Appears in the following advisories)
(Found alongside the following vulnerabilities)
CVE-2020-9983 is a vulnerability in WebKit that allows an attacker to perform an out-of-bounds write.
The severity of CVE-2020-9983 is not specified in the provided information.
CVE-2020-9983 affects Apple tvOS 14.0, Apple Safari 14.0, Apple iOS 14.0, Apple iPadOS 14.0, Apple watchOS 7.0, Apple iCloud for Windows 11.5, and Apple iTunes for Windows 12.10.9.
To fix CVE-2020-9983, update your affected software to the recommended versions provided by Apple.
You can find more information about CVE-2020-9983 on the Apple support page: [https://support.apple.com/en-us/HT211845](https://support.apple.com/en-us/HT211845)