CVE-2010-0045
Apple Safari before 4.0.5 on Windows does not properly validate external URL schemes, which...
Apple Safari before 4.0.5 on Windows does not properly validate external URL schemes, which allows remote attackers to open local files and execute arbitrary code via a crafted HTML document.
Exploit likelihood
What each source reports
NVD Score used
Apple Safari before 4.0.5 on Windows does not properly validate external URL schemes, which allows remote attackers to open local files and execute arbitrary code via a crafted HTML document.
- Record
CVE-2010-0045- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
Apple Safari before 4.0.5 on Windows does not properly validate external URL schemes, which allows remote attackers to open local files and execute arbitrary code via a crafted HTML document.
- Record
CVE-2010-0045- Updated
- 2026-11-02
EUVDEUVD-2010-0077 No score
Apple Safari before 4.0.5 on Windows does not properly validate external URL schemes, which allows remote attackers to open local files and execute arbitrary code via a crafted HTML document.
- Record
EUVD-2010-0077- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qp7p-gj3v-w2r8 No score
Apple Safari before 4.0.5 on Windows does not properly validate external URL schemes, which...
Apple Safari before 4.0.5 on Windows does not properly validate external URL schemes, which allows remote attackers to open local files and execute arbitrary code via a crafted HTML document.
- Record
GHSA-qp7p-gj3v-w2r8- Weakness
- CWE-20
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-0045 is a high vulnerability (CVSS 9.3) in Apple Safari, published March 12, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.40%, the 91st percentile. No source names a fixed version.
References
lists.apple.com/archives/security-announce/2010/Mar/msg00000.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6817
securitytracker.com/id?1023706
support.apple.com/kb/HT4070
securityfocus.com/bid/38671
nvd.nist.gov/vuln/detail/CVE-2010-0045
github.com/advisories/GHSA-qp7p-gj3v-w2r8