CVE-2010-1386: apple webkit

EPSS trend

Probability

2.13%

Chance of exploitation in the next 30 days

Percentile

82%

Versus all other CVEs

30-day change

0.00 pp

From 2.13% on 19-09-2026

19-09-202619-10-2026

EPSS score

2.13%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

12 links

www.mandriva.com/security/advisories?name=MDVSA-2011:039Vendor AdvisoryX Refsource MANDRIVA
security-tracker.debian.org/tracker/CVE-2010-1386X Refsource CONFIRM
www.vupen.com/english/advisories/2010/2722VDB EntryX Refsource VUPENVendor Advisory
secunia.com/advisories/43068Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.ubuntu.com/usn/USN-1006-1Vendor AdvisoryX Refsource UBUNTU
secunia.com/advisories/41856Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.vupen.com/english/advisories/2011/0212VDB EntryX Refsource VUPENVendor Advisory
www.securityfocus.com/bid/42500VDB EntryX Refsource BID
trac.webkit.org/changeset/56188X Refsource CONFIRM
lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.htmlVendor AdvisoryX Refsource SUSE

Show all 12 references

www.vupen.com/english/advisories/2011/0552VDB EntryX Refsource VUPENVendor Advisory
bugs.webkit.org/show_bug.cgi?id=36255X Refsource CONFIRM

Related vulnerabilities

CVE-2007-0342applemac_os_x+34.55%19y ago18-01-2007 02:00WebCore in Apple WebKit build 18794 allows remote attackers to cause a denial of service (null dereference and application crash) via a TD element with a large number in the ROWSPAN attribute, as demonstrated by a crash of OmniWeb 5.5.3 on Mac OS X 10.4.8, a different vulnerability than CVE-2006-2019.CVE-2016-4592applewebkit+42.23%10y ago22-07-2016 01:00WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to cause a denial of service (memory consumption) via a crafted web site.CVE-2016-4583applewebkit+51.83%10y ago22-07-2016 01:00WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to bypass the Same Origin Policy and obtain image date from an unintended web site via a timing attack involving an SVG document.CVE-2010-1760applewebkit2.64%16y ago19-08-2010 20:00loader/DocumentThreadableLoader.cpp in the XMLHttpRequest implementation in WebCore in WebKit before r58409 does not properly handle credentials during a cross-origin synchronous request, which has unspecified impact and remote attack vectors, aka rdar problem 7905150.CVE-2010-0647applewebkit+13.88%16y ago18-02-2010 17:19WebKit before r53525, as used in Google Chrome before 4.0.249.89, allows remote attackers to execute arbitrary code in the Chrome sandbox via a malformed RUBY element, as demonstrated by a <ruby>><table><rt> sequence.CVE-2010-0656applewebkit+11.15%16y ago18-02-2010 17:19WebKit before r51295, as used in Google Chrome before 4.0.249.78, presents a directory-listing page in response to an XMLHttpRequest for a file:/// URL that corresponds to a directory, which allows attackers to obtain sensitive information or possibly have unspecified other impact via a crafted local HTML document.

All vulnerabilities inwebkit

CVE-2010-1386: apple webkit

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References