VULNERABILITY INTELLIGENCE
CVE-2010-0051
CVSS score4.3 MEDIUM
EPSS probability2.80%
CISA KEVNot currently listed
Published2010-03-15
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:N/A:N
Description
WebKit in Apple Safari before 4.0.5 does not properly validate the cross-origin loading of stylesheets, which allows remote attackers to obtain sensitive information via a crafted HTML document. NOTE: this might overlap CVE-2010-0651.
Weakness classification
- CWE-20: Improper Input Validation
Primary references
- product-security@apple.com
- product-security@apple.com
- product-security@apple.com
- product-security@apple.com — Vendor Advisory
- product-security@apple.com
- product-security@apple.com
- product-security@apple.com
- product-security@apple.com
- product-security@apple.com
- product-security@apple.com
- product-security@apple.com — Vendor Advisory
- product-security@apple.com