Vulnerabilities > CVE-2020-9948 - Type Confusion vulnerability in multiple products

CVSS 8.8 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

NVD

Published: 2020-10-16

Updated: 2022-07-23

Summary

A type confusion issue was addressed with improved memory handling. This issue is fixed in Safari 14.0. Processing maliciously crafted web content may lead to arbitrary code execution.

Vulnerable Configurations

Part	Description	Count
Application	Apple Apple Safari - Apple Safari 1.0 Apple Safari 1.0.0 Apple Safari 1.0.0B1 Apple Safari 1.0.0B2 Apple Safari 1.0.1 Apple Safari 1.0.2 Apple Safari 1.0.3 Apple Safari 1.0B1 Apple Safari 1.1 Apple Safari 1.1.0 Apple Safari 1.1.1 Apple Safari 1.2 Apple Safari 1.2.0 Apple Safari 1.2.1 Apple Safari 1.2.2 Apple Safari 1.2.3 Apple Safari 1.2.4 Apple Safari 1.2.5 Apple Safari 1.3 Apple Safari 1.3.0 Apple Safari 1.3.1 Apple Safari 1.3.2 Apple Safari 2 Apple Safari 2.0 Apple Safari 2.0.0 Apple Safari 2.0.1 Apple Safari 2.0.2 Apple Safari 2.0.3 Apple Safari 2.0.4 Apple Safari 3 Apple Safari 3.0 Apple Safari 3.0.0 Apple Safari 3.0.0B Apple Safari 3.0.1 Apple Safari 3.0.1B Apple Safari 3.0.2 Apple Safari 3.0.2B Apple Safari 3.0.3 Apple Safari 3.0.3B Apple Safari 3.0.4 Apple Safari 3.0.4B Apple Safari 3.0.5 Apple Safari 3.1.0 Apple Safari 3.1.0B Apple Safari 3.1.1 Apple Safari 3.1.1B Apple Safari 3.1.2 Apple Safari 3.1.2B Apple Safari 3.2.0 Apple Safari 3.2.0B Apple Safari 3.2.1 Apple Safari 3.2.1B Apple Safari 3.2.2 Apple Safari 3.2.2B Apple Safari 4.0 Apple Safari 4.0.0B Apple Safari 4.0.1 Apple Safari 4.0.2 Apple Safari 4.0.3 Apple Safari 4.0.4 Apple Safari 4.0.5 Apple Safari 4.1 Apple Safari 4.1.1 Apple Safari 4.1.2 Apple Safari 4.1.3 Apple Safari 5.0 Apple Safari 5.0.1 Apple Safari 5.0.2 Apple Safari 5.0.3 Apple Safari 5.0.4 Apple Safari 5.0.5 Apple Safari 5.0.6 Apple Safari 5.1 Apple Safari 5.1.1 Apple Safari 5.1.2 Apple Safari 5.1.3 Apple Safari 5.1.4 Apple Safari 5.1.5 Apple Safari 5.1.6 Apple Safari 5.1.7 Apple Safari 6.0 Apple Safari 6.0.1 Apple Safari 6.0.2 Apple Safari 6.0.3 Apple Safari 6.0.4 Apple Safari 6.0.5 Apple Safari 6.1 Apple Safari 6.1.1 Apple Safari 6.1.2 Apple Safari 6.1.3 Apple Safari 6.1.4 Apple Safari 6.1.5 Apple Safari 6.2.1 Apple Safari 6.2.4 Apple Safari 6.2.5 Apple Safari 6.2.6 Apple Safari 6.2.8 Apple Safari 7.0 Apple Safari 7.0.1 Apple Safari 7.0.2 Apple Safari 7.0.3 Apple Safari 7.0.4 Apple Safari 7.0.5 Apple Safari 7.1 Apple Safari 7.1.1 Apple Safari 7.1.4 Apple Safari 7.1.5 Apple Safari 7.1.6 Apple Safari 7.1.8 Apple Safari 8.0 Apple Safari 8.0.1 Apple Safari 8.0.4 Apple Safari 8.0.5 Apple Safari 8.0.6 Apple Safari 8.0.8 Apple Safari 9.0.1 Apple Safari 9.0.2 Apple Safari 9.0.3 Apple Safari 9.1 Apple Safari 9.1.1 Apple Safari 9.1.3 Apple Safari 10.0.0 Apple Safari 10.0.1 Apple Safari 10.0.2 Apple Safari 10.0.3 Apple Safari 10.1 Apple Safari 10.1.1 Apple Safari 10.1.2 Apple Safari 11.0 Apple Safari 11.0.1 Apple Safari 11.0.2 Apple Safari 11.0.3 Apple Safari 11.1 Apple Safari 11.1.1 Apple Safari 11.1.2 Apple Safari 12 Apple Safari 12.0 Apple Safari 12.0.1 Apple Safari 12.0.2 Apple Safari 12.0.3 Apple Safari 12.1 Apple Safari 12.1.1 Apple Safari 12.1.2 Apple Safari 13 Apple Safari 13.0.1 Apple Safari 13.0.3 Apple Safari 13.0.4 Apple Safari 13.0.5 Apple Safari 13.1 Apple Safari 13.1.1 Apple Safari 13.1.2	177
Application	Webkit Webkit Webkitgtk+ 1.1.1 Webkit Webkitgtk+ 1.1.3 Webkit Webkitgtk+ 1.1.4 Webkit Webkitgtk+ 1.1.5 Webkit Webkitgtk+ 1.1.6 Webkit Webkitgtk+ 1.1.7	6
OS	Debian Debian Debian Linux 10.0	1

Common Weakness Enumeration (CWE)

CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References