VULNERABILITY INTELLIGENCE
CVE-2010-0044
CVSS score4.3 MEDIUM
EPSS probability1.53%
CISA KEVNot currently listed
Published2010-03-15
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:N/A:N
Description
PubSub in Apple Safari before 4.0.5 does not properly implement use of the Accept Cookies preference to block cookies, which makes it easier for remote web servers to track users by setting a cookie in a (1) RSS or (2) Atom feed.
Primary references
- product-security@apple.com — Vendor Advisory
- product-security@apple.com
- product-security@apple.com — Vendor Advisory
- product-security@apple.com — Patch
- product-security@apple.com — Patch
- product-security@apple.com
- product-security@apple.com
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch
- af854a3a-2127-422b-91ae-364da2661108 — Patch