CVE-2009-1695

no score yetEPSS 2.7%

apple safari: no CVSS score yet. EPSS 2.7% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to inject arbitrary web script or HTML via vectors involving access to frame contents after completion of a page transition.

EPSS: 2.7% chance of exploitation in the next 30 days; higher than 85% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2009-06-10
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

apple:safari

References

http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html
http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
http://osvdb.org/54991
http://secunia.com/advisories/35379

Check your stack JSON