CVE-2010-1386
page/Geolocation.cpp in WebCore in WebKit before r56188 and before 1.2.5 does not properly...
page/Geolocation.cpp in WebCore in WebKit before r56188 and before 1.2.5 does not properly restrict access to the lastPosition function, which has unspecified impact and remote attack vectors, aka rdar problem 7746357.
Exploit likelihood
What each source reports
NVD Score used
page/Geolocation.cpp in WebCore in WebKit before r56188 and before 1.2.5 does not properly restrict access to the lastPosition function, which has unspecified impact and remote attack vectors, aka rdar problem 7746357.
- Record
CVE-2010-1386- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
page/Geolocation.cpp in WebCore in WebKit before r56188 and before 1.2.5 does not properly restrict access to the lastPosition function, which has unspecified impact and remote attack vectors, aka rdar problem 7746357.
- Record
CVE-2010-1386- Updated
- 2026-11-02
EUVDEUVD-2010-1414 No score
page/Geolocation.cpp in WebCore in WebKit before r56188 and before 1.2.5 does not properly restrict access to the lastPosition function, which has unspecified impact and remote attack vectors, aka rdar problem 7746357.
- Record
EUVD-2010-1414- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9734-fx25-6jww No score
page/Geolocation.cpp in WebCore in WebKit before r56188 and before 1.2.5 does not properly...
page/Geolocation.cpp in WebCore in WebKit before r56188 and before 1.2.5 does not properly restrict access to the lastPosition function, which has unspecified impact and remote attack vectors, aka rdar problem 7746357.
- Record
GHSA-9734-fx25-6jww- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-1386 is a high vulnerability (CVSS 10.0) in Apple Webkit, published August 19, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.13%, the 82nd percentile. No source names a fixed version.
References
mandriva.com/security/advisories?name=MDVSA-2011:039
security-tracker.debian.org/tracker/CVE-2010-1386
vupen.com/english/advisories/2010/2722
secunia.com/advisories/43068
ubuntu.com/usn/USN-1006-1
Show 8 moreShow less
securityfocus.com/bid/42500
trac.webkit.org/changeset/56188
lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
bugs.webkit.org/show_bug.cgi?id=36255
nvd.nist.gov/vuln/detail/CVE-2010-1386
github.com/advisories/GHSA-9734-fx25-6jww