CVE-2020-9983
CVE-2020-9983
Vexday Risk Score
3Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS —EPSS 2.0%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado
Ciclo de vida
16 oct 2020Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Safari 14.0. Processing maliciously crafted web content may lead to code execution.
Productos afectados
Apple · Safari¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →Referencias
http://seclists.org/fulldisclosure/2020/Nov/18http://seclists.org/fulldisclosure/2020/Nov/19http://seclists.org/fulldisclosure/2020/Nov/20http://seclists.org/fulldisclosure/2020/Nov/22https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BY2OBQZFMEFZOSWXPXHPEHOJXXILEEX2/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PDGBNKYT7NMW7CJ26YFUPUHPJVYGV7IQ/https://security.gentoo.org/glsa/202012-10https://support.apple.com/HT211845https://support.apple.com/kb/HT211843https://support.apple.com/kb/HT211844https://support.apple.com/kb/HT211850https://support.apple.com/kb/HT211935