CVE-2020-9951

Published: 16/10/2020 Updated: 23/07/2022

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8

VMScore: 605

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

A use after free issue was found in webkit2gtk prior to 2.30.0. Processing maliciously crafted web content may have lead to arbitrary code execution.

Vulnerable Product	Search on Vulmon	Subscribe to Product
apple iphone os
apple watchos
apple safari
apple tvos
apple ipados
apple icloud
apple itunes
webkit webkitgtk+
debian debian linux 10.0

The following vulnerabilities have been discovered in the webkit2gtk web engine: CVE-2020-9948 Brendan Draper discovered that processing maliciously crafted web content may lead to arbitrary code execution CVE-2020-9951 Marcin Noga discovered that processing maliciously crafted web content may lead to arbitrary code execution CVE ...

A use after free issue was found in webkit2gtk before 2300 Processing maliciously crafted web content may have lead to arbitrary code execution ...

------------------------------------------------------------------------ WebKitGTK and WPE WebKit Security Advisory WSA-2020-0008 ------------------------------------------------------------------------ Date reported : November 23, 2020 Advisory ID : WSA-2020-0008 WebKitGTK Advisory URL : webkitgtkor ...

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-2020-09-16-3 Safari 140 Safari 140 is now available and addresses the following: WebKit Available for: macOS Catalina and macOS Mojave, and included in macOS Big Sur Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: A type confusion issu ...

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-2020-11-13-5 Additional information for APPLE-SA-2020-09-16-3 Safari 140 Safari 140 addresses the following issues Information about the security content is also available at supportapplecom/HT211845 Safari Available for: macOS Catalina and macOS Mojave, and included in macOS ...

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-2020-11-13-3 Additional information for APPLE-SA-2020-09-16-1 iOS 140 and iPadOS 140 iOS 140 and iPadOS 140 addresses the following issues Information about the security content is also available at supportapplecom/HT211850 AppleAVD Available for: iPhone 6s and later, iPod ...

Russians charged for $16.8m crypto-coin heist, but traders warned their cash is only as safe as their security is tight

The Register • Shaun Nichols in San Francisco • 21 Sep 2020

Plus: Lazarus Group joins the big league, ex-Aussie PM doxxed, new flaw found in Bluetooth, and more

In brief A pair from Russia have been indicted for stealing nearly $17m worth of cryptocurrency. US prosecutors allege that Dmitrii Karasavid and Danil Potekhin did everything from phishing and spoofing to price manipulation to make off with $16.8m in internet scrip. Prosecutors claim that the pair would use phishing emails and fake logins to steal the passwords of currency owners. After breaking into the wallets and making off with the cryptocurrency, it is said they and their unnamed co-conspi...

CVE-2020-9951

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Mailing Lists

Recent Articles

References

Vulmon Search

About

Products

Connect