#VU20911 Use-after-free in Apple Safari - CVE-2019-8681
Published: September 6, 2019
Vulnerability identifier: #VU20911
Vulnerability risk: Medium
CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/U:Green
CVE-ID: CVE-2019-8681
CWE-ID: CWE-416
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerable software:
Apple Safari
Apple Safari
Software vendor:
Apple Inc.
Apple Inc.
Description
The vulnerability allows a remote attacker to compromise vulnerable system.
The vulnerability exists due to a use-after-free error within the "InlineBox" renderer method. A remote attacker can trick a victim to visit a malicious page or open a malicious file and execute arbitrary code in the context of the current process.
Successful exploitation of the vulnerability may allow an attacker to compromise vulnerable system.
Remediation
Install updates from vendor's website.