CVE-2012-0589

no score yetEPSS 2.0%

Cross-site scripting (XSS) vulnerability in WebKit, as used in Apple iOS before 5.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2012-0586, CVE-2012-0587, and CVE-2012-0588.

EPSS: 2.0% chance of exploitation in the next 30 days; higher than 81% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2012-03-08
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

apple:iphone_os

References

http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html
http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html
http://osvdb.org/79968
http://secunia.com/advisories/48288
http://secunia.com/advisories/48377

Check your stack JSON