VULNERABILITY INTELLIGENCE
CVE-2009-1696
CVSS score5 MEDIUM
EPSS probability2.33%
CISA KEVNot currently listed
Published2009-06-10
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:N
Description
WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 uses predictable random numbers in JavaScript applications, which makes it easier for remote web servers to track the behavior of a Safari user during a session.
Primary references
- cve@mitre.org
- cve@mitre.org — Patch, Vendor Advisory
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org — Vendor Advisory
- cve@mitre.org
- cve@mitre.org — Patch, Vendor Advisory
- cve@mitre.org
- cve@mitre.org — Exploit
- cve@mitre.org — Patch, Vendor Advisory
- cve@mitre.org
- cve@mitre.org