peter bassill · operator
$ cve CVE-2010-0049 JSON

CVE-2010-0049 EXPLOIT

9.3
HIGH · CVSS 2.0 · EPSS 10.9% (pctl 96)

Patch early

A public exploit exists.

Description

Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via HTML elements with right-to-left (RTL) text directionality.

Scoring

CVSS9.3 (HIGH, v2.0)
VectorAV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS10.94% — more likely to be exploited than 96% of all CVEs
WeaknessCWE-399
On CISA KEVno
Public exploityes
Published2010-03-15
Last modified2026-06-16

Affected (1)

VendorProduct
applesafari

Public exploits

SourceTitleDate
exploit-dbWebKit 1.2.x - Right-to-Left Displayed Text Handling Memory Corruption2010-03-11

References

→ the Explorer  ·  watch your stack  ·  NVD