CVE-2007-2400

no score yetEPSS 2.6%

Race condition in Apple Safari 3 Beta before 3.0.2 on Mac OS X, Windows XP, Windows Vista, and iPhone before 1.0.1, allows remote attackers to bypass the JavaScript security model and modify pages outside of the security domain and conduct cross-site scripting (XSS) attacks via vectors related to page updating and HTTP redirects.

EPSS: 2.6% chance of exploitation in the next 30 days; higher than 85% of CVEs (scores of 2026-10-31)
CWEs: CWE-79, CWE-362
Published: 2007-06-25
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

apple:iphone_os
apple:safari

References

http://docs.info.apple.com/article.html?artnum=306173
http://lists.apple.com/archives/Security-announce/2007/Jun/msg00004.html
http://osvdb.org/36452
http://secunia.com/advisories/26287
http://www.kb.cert.org/vuls/id/289988

Check your stack JSON