Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.
← back | CVE Intelligence

CVE-2020-9802

Curated 3 security research writeups, vulnerability advisories and exploitation analyses for CVE-2020-9802.

Coverage Span
2020-09-01
Reports
3 related reports

Associated Reports & Timeline

1.
[CVE-2020-9802] JITSploitation I: A JIT Bug
projectzero.google | vulnerability | | original ↗ | #jit | #cve | #project-zero | #safari
This three-part series highlights the technical challenges involved in finding and exploiting JavaScript engine vulnerabilities in modern web browsers and evaluates current exploit mitigation technologies. The exploited vulnerability, CVE-2020-9802, was fixed in iOS 13.5, while two of the mitigation bypasses, CVE-2020-9870 and CVE-2020-9910, were fixed in iOS 13.6.
2.
[CVE-2020-9802] JITSploitation III: Subverting Control Flow
projectzero.google | vulnerability | | original ↗ | #cve | #exploit-development | #project-zero | #safari
This three-part series highlights the technical challenges involved in finding and exploiting JavaScript engine vulnerabilities in modern web browsers and evaluates current exploit mitigation technologies. The exploited vulnerability, CVE-2020-9802, was fixed in iOS 13.5, while two of the mitigation bypasses, CVE-2020-9870 and CVE-2020-9910, were fixed in iOS 13.6.
3.
[CVE-2020-9802] JITSploitation II: Getting Read/Write
projectzero.google | vulnerability | | original ↗ | #cve | #exploit-development | #project-zero | #safari
This three-part series highlights the technical challenges involved in finding and exploiting JavaScript engine vulnerabilities in modern web browsers and evaluates current exploit mitigation technologies. The exploited vulnerability, CVE-2020-9802, was fixed in iOS 13.5, while two of the mitigation bypasses, CVE-2020-9870 and CVE-2020-9910, were fixed in iOS 13.6.