CVE-2010-1419

no score yetEPSS 6.7%

apple: no CVSS score yet. EPSS 6.7% chance of exploitation in the next 30 days.

Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows user-assisted remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving a certain window close action that occurs during a drag-and-drop operation.

EPSS: 6.7% chance of exploitation in the next 30 days; higher than 93% of CVEs (scores of 2026-10-31)
CWE: CWE-399
Published: 2010-06-11
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

apple:safari
apple:webkit

References

http://lists.apple.com/archives/security-announce/2010//Jun/msg00002.html
http://lists.apple.com/archives/security-announce/2010/Jun/msg00000.html
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
http://secunia.com/advisories/40105
http://secunia.com/advisories/40196

Check your stack JSON