VULNERABILITY INTELLIGENCE

CVE-2011-0169

CVSS score2.6 LOW

EPSS probability1.48%

CISA KEVNot currently listed

Published2011-03-11

Last modified2026-06-16

Description

WebKit in Apple Safari before 5.0.4, when the Web Inspector is used, does not properly handle the window.console._inspectorCommandLineAPI property, which allows user-assisted remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via a crafted web site.