Fwd: [CIAD-2020-0085] Use-After-Free Vulnerability in Apple Safari

Software Affected

Apple Safari versions prior to Safari 14.0.2

Overview

A vulnerability has been reported in Apple Safari which could allow a

remote attacker to execute arbitrary code on the target system.

Description

This vulnerability exist in Apple Safari due to improper memory management

issue which trigger use-after-free error in macOS Catalina and macOS

Mojave. A remote attacker could exploit the vulnerability by executing

specially crafted application. 

Successful exploitation of this vulnerability could allow the attacker to

execute arbitrary code on the target system.

Solution

Apply appropriate patches as mentioned in the   Apple Security Updates

Vendor Information

Apple

References

Apple

CVE Name

CVE-2020-15969