{"id":"CVE-2020-9932","aliases":["EUVD-2020-30711","GHSA-w848-4qq3-q4r3"],"status":"published","title":"A memory corruption issue was addressed with improved validation. This issue is fixed in Safari...","description":"A memory corruption issue was addressed with improved validation. This issue is fixed in Safari 13.0.1, iOS 13.1 and iPadOS 13.1, tvOS 13. Processing maliciously crafted web content may lead to arbitrary code execution.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.01172,"percentile":0.67714,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-119","CWE-787"],"published":"2020-10-27T20:52:23Z","modified":"2026-06-17T03:28:49Z","products":[{"vendor":"apple","product":"ios and ipados"},{"vendor":"apple","product":"ipados"},{"vendor":"apple","product":"iphone_os"},{"vendor":"apple","product":"safari"},{"vendor":"apple","product":"tvos"}],"references":[{"url":"https://support.apple.com/en-us/HT210604","tags":["x_refsource_MISC","x_transferred","Release Notes","Vendor Advisory"]},{"url":"https://support.apple.com/en-us/HT210603","tags":["x_refsource_MISC","x_transferred","Release Notes","Vendor Advisory"]},{"url":"https://support.apple.com/en-us/HT210605","tags":["x_refsource_MISC","x_transferred","Release Notes","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-9932"},{"url":"https://github.com/advisories/GHSA-w848-4qq3-q4r3"}],"sources":{"cve":[{"id":"CVE-2020-9932","description":"A memory corruption issue was addressed with improved validation. This issue is fixed in Safari 13.0.1, iOS 13.1 and iPadOS 13.1, tvOS 13. Processing maliciously crafted web content may lead to arbitrary code execution.","status":"published","published":"2020-10-27T20:52:23Z","modified":"2024-08-04T10:50:56.853Z","updated_at":"2026-11-02T14:35:49.538427Z"}],"euvd":[{"id":"EUVD-2020-30711","description":"A memory corruption issue was addressed with improved validation. This issue is fixed in Safari 13.0.1, iOS 13.1 and iPadOS 13.1, tvOS 13. Processing maliciously crafted web content may lead to arbitrary code execution.","status":"published","published":"2020-10-27T20:52:23Z","modified":"2024-08-04T10:50:56Z","updated_at":"2026-11-03T03:07:51.994742Z"}],"ghsa":[{"id":"GHSA-w848-4qq3-q4r3","title":"A memory corruption issue was addressed with improved validation. This issue is fixed in Safari...","description":"A memory corruption issue was addressed with improved validation. This issue is fixed in Safari 13.0.1, iOS 13.1 and iPadOS 13.1, tvOS 13. Processing maliciously crafted web content may lead to arbitrary code execution.","status":"published","published":"2022-05-24T17:32:45Z","modified":"2023-01-29T05:04:20Z","cwes":["CWE-119"],"updated_at":"2026-11-02T14:45:31.69314Z"}],"nvd":[{"id":"CVE-2020-9932","description":"A memory corruption issue was addressed with improved validation. This issue is fixed in Safari 13.0.1, iOS 13.1 and iPadOS 13.1, tvOS 13. Processing maliciously crafted web content may lead to arbitrary code execution.","status":"published","published":"2020-10-27T21:15:15.713Z","modified":"2026-06-17T03:28:49.797Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:06:21.80969Z"}]}}