ZeroHour

CVE-2020-9948

CVSS 3.1
8.8 high
EPSS
2%p76
Published
()
Modified
Description

A type confusion issue was addressed with improved memory handling. This issue is fixed in Safari 14.0. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendors
applewebkitdebian
Products
safari, webkitgtk\+, debian linux
Weakness
CWE-843
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

In the news