Description (CNA)
A use after free issue was addressed with improved memory management. This issue is fixed in Safari 14.0. Processing maliciously crafted web content may lead to arbitrary code execution.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Apple / Safari | affected unspecified before Safari 14.0 |
CWE
No CWE identifiers supplied.
References
- https://support.apple.com/kb/HT211843
- https://support.apple.com/kb/HT211850
- https://support.apple.com/kb/HT211844
- https://support.apple.com/HT211845
- https://support.apple.com/kb/HT211952
- http://seclists.org/fulldisclosure/2020/Nov/18
- http://seclists.org/fulldisclosure/2020/Nov/19
- http://seclists.org/fulldisclosure/2020/Nov/20
- http://seclists.org/fulldisclosure/2020/Nov/22
- http://www.openwall.com/lists/oss-security/2020/11/23/3
- https://www.debian.org/security/2020/dsa-4797
- https://support.apple.com/kb/HT211935
- https://security.gentoo.org/glsa/202012-10
ADP enrichment
No English description supplied.
- https://support.apple.com/kb/HT211843
- https://support.apple.com/kb/HT211850
- https://support.apple.com/kb/HT211844
- https://support.apple.com/HT211845
- https://support.apple.com/kb/HT211952
- http://seclists.org/fulldisclosure/2020/Nov/18
- http://seclists.org/fulldisclosure/2020/Nov/19
- http://seclists.org/fulldisclosure/2020/Nov/20
- http://seclists.org/fulldisclosure/2020/Nov/22
- http://www.openwall.com/lists/oss-security/2020/11/23/3
- https://www.debian.org/security/2020/dsa-4797
- https://support.apple.com/kb/HT211935
- https://security.gentoo.org/glsa/202012-10