CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 0CVE-2020-9987
https://notcve.org/view.php?id=CVE-2020-9987
13 Nov 2020 — An inconsistent user interface issue was addressed with improved state management. This issue is fixed in Safari 14.0. Visiting a malicious website may lead to address bar spoofing. Se abordó un problema de inconsistencia de la interfaz de usuario con una administración de estado mejorada. Este problema se corrigió en Safari versión 14.0. • https://support.apple.com/en-us/HT211845 • CWE-1021: Improper Restriction of Rendered UI Layers or Frames •
CVSS: 8.8EPSS: 0%CPEs: 7EXPL: 0CVE-2020-9947 – Apple Safari RenderObject Use-After-Free Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2020-9947
13 Nov 2020 — A use after free issue was addressed with improved memory management. This issue is fixed in watchOS 7.0, iOS 14.0 and iPadOS 14.0, iTunes for Windows 12.10.9, iCloud for Windows 11.5, tvOS 14.0, Safari 14.0. Processing maliciously crafted web content may lead to arbitrary code execution. Se abordó un problema de uso de la memoria previamente liberada con una administración de la memoria mejorada. Este problema se corrigió en watchOS versión 7.0, iOS versión 14.0 e iPadOS versión 14.0, iTunes para Windows v... • http://www.openwall.com/lists/oss-security/2021/03/22/1 • CWE-416: Use After Free •
CVSS: 8.8EPSS: 0%CPEs: 5EXPL: 0CVE-2020-9950 – Apple Safari TextNode Use-After-Free Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2020-9950
13 Nov 2020 — A use after free issue was addressed with improved memory management. This issue is fixed in watchOS 7.0, tvOS 14.0, Safari 14.0, iOS 14.0 and iPadOS 14.0. Processing maliciously crafted web content may lead to arbitrary code execution. Se abordó un problema de uso de la memoria previamente liberada con una administración de la memoria mejorada. Este problema se corrigió en watchOS versión 7.0, tvOS versión 14.0, Safari versión 14.0, iOS versión 14.0 y iPadOS versión 14.0. • https://support.apple.com/en-us/HT211843 • CWE-416: Use After Free •
CVSS: 7.8EPSS: 0%CPEs: 13EXPL: 0CVE-2020-27918 – webkitgtk: Use-after-free leading to arbitrary code execution
https://notcve.org/view.php?id=CVE-2020-27918
09 Nov 2020 — A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 14.2 and iPadOS 14.2, iCloud for Windows 11.5, Safari 14.0.1, tvOS 14.2, iTunes 12.11 for Windows. Processing maliciously crafted web content may lead to arbitrary code execution. Se abordó un problema de uso de la memoria previamente liberada, con una administración de la memoria mejorada. Este problema se corrigió en macOS Big Sur versión 11.0.1, watchOS versión 7.1, iOS... • http://seclists.org/fulldisclosure/2020/Dec/32 • CWE-416: Use After Free •
CVSS: 8.8EPSS: 0%CPEs: 4EXPL: 0CVE-2020-9932
https://notcve.org/view.php?id=CVE-2020-9932
27 Oct 2020 — A memory corruption issue was addressed with improved validation. This issue is fixed in Safari 13.0.1, iOS 13.1 and iPadOS 13.1, tvOS 13. Processing maliciously crafted web content may lead to arbitrary code execution. Se abordó un problema de corrupción de memoria con comprobaciones mejoradas. Este problema se corrigió en Safari versión 13.0.1, iOS versión 13.1 y iPadOS versión 13.1, tvOS versión 13. • https://support.apple.com/en-us/HT210603 • CWE-787: Out-of-bounds Write •
CVSS: 5.8EPSS: 0%CPEs: 1EXPL: 0CVE-2020-9860
https://notcve.org/view.php?id=CVE-2020-9860
27 Oct 2020 — A custom URL scheme handling issue was addressed with improved input validation. This issue is fixed in Safari 13.0.5. Processing a maliciously crafted URL may lead to arbitrary javascript code execution. Se abordó un problema de manejo del esquema de URL personalizado con una comprobación de entrada mejorada. Este problema se corrigió en Safari versión 13.0.5. • https://support.apple.com/en-us/HT210922 •
CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0CVE-2020-3852
https://notcve.org/view.php?id=CVE-2020-3852
27 Oct 2020 — A logic issue was addressed with improved validation. This issue is fixed in Safari 13.0.5. A URL scheme may be incorrectly ignored when determining multimedia permission for a website. Se abordó un problema lógico con una comprobación mejorada. Este problema se corrigió en Safari versión 13.0.5. • https://support.apple.com/en-us/HT210922 • CWE-863: Incorrect Authorization •
CVSS: 4.3EPSS: 0%CPEs: 5EXPL: 0CVE-2019-8898
https://notcve.org/view.php?id=CVE-2019-8898
27 Oct 2020 — An information disclosure issue existed in the handling of the Storage Access API. This issue was addressed with improved logic. This issue is fixed in iOS 13.3 and iPadOS 13.3, tvOS 13.3, Safari 13.0.4, iTunes 12.10.3 for Windows. Visiting a maliciously crafted website may reveal sites a user has visited. Se presentó un problema de divulgación de información en el manejo de la API Storage Access. • https://support.apple.com/en-us/HT210785 •
CVSS: 4.3EPSS: 0%CPEs: 7EXPL: 0CVE-2019-8827
https://notcve.org/view.php?id=CVE-2019-8827
27 Oct 2020 — The HTTP referrer header may be used to leak browsing history. The issue was resolved by downgrading all third party referrers to their origin. This issue is fixed in Safari 13.0.3, iTunes 12.10.2 for Windows, iCloud for Windows 10.9.2, tvOS 13.2, iOS 13.2 and iPadOS 13.2, iCloud for Windows 7.15. Visiting a maliciously crafted website may reveal the sites a user has visited. El encabezado referrer HTTP puede ser usado para filtrar el historial de navegación. • https://support.apple.com/en-us/HT210721 •
CVSS: 6.1EPSS: 0%CPEs: 7EXPL: 0CVE-2019-8762
https://notcve.org/view.php?id=CVE-2019-8762
27 Oct 2020 — A validation issue was addressed with improved logic. This issue is fixed in Safari 13.0.1, iOS 13.1 and iPadOS 13.1, iCloud for Windows 10.7, tvOS 13, iCloud for Windows 7.14, iTunes 12.10.1 for Windows. Processing maliciously crafted web content may lead to universal cross site scripting. Se abordó un problema de comprobación con una lógica mejorada. Este problema se corrigió en Safari versión 13.0.1, iOS versión 13.1 y iPadOS versión 13.1, iCloud para Windows versión 10.7, tvOS versión 13, iCloud p... • https://support.apple.com/en-us/HT210603 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •