peter bassill · operator
$ cve CVE-2010-1759 JSON

CVE-2010-1759 EXPLOIT

9.3
HIGH · CVSS 2.0 · EPSS 15.7% (pctl 97)

Patch early

A public exploit exists.

Description

Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to the Node.normalize method.

Scoring

CVSS9.3 (HIGH, v2.0)
VectorAV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS15.73% — more likely to be exploited than 97% of all CVEs
WeaknessCWE-399
On CISA KEVno
Public exploityes
Published2010-06-11
Last modified2026-06-16

Affected (7)

VendorProduct
applemac os x
applemac os x server
applesafari
applewebkit
microsoftwindows 7
microsoftwindows vista
microsoftwindows xp

Public exploits

SourceTitleDate
exploit-dbWebkit Normalize Bug - Android 2.22012-02-01

References

→ the Explorer  ·  watch your stack  ·  NVD