CVE-2020-9948: Apple Safari

High severity, CVSS 8.8. EPSS: 1.7% chance of exploitation in the next 30 days.

A type confusion issue was addressed with improved memory handling. This issue is fixed in Safari 14.0. Processing maliciously crafted web content may lead to arbitrary code execution.

Affected products

• Apple Safari: before 14.0 (fixed in 14.0)
• Debian Debian Linux: version 10.0 only
• Webkit Webkitgtk+: up to and including 2.30.3

Published 2020-10-16. Last modified 2026-06-17.