CVE-2009-1684

no score yetEPSS 8.7%

apple safari: no CVSS score yet. EPSS 8.7% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to inject arbitrary web script or HTML via an event handler that triggers script execution in the context of the next loaded document.

EPSS: 8.7% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2009-06-10
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

apple:safari

References

http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html
http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
http://osvdb.org/54987
http://secunia.com/advisories/35379

Check your stack JSON