CVE-2010-1393

The Cascading Style Sheets (CSS) implementation in WebKit in Apple Safari before 5.0 on Mac OS X...

4.3 Medium

The Cascading Style Sheets (CSS) implementation in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to discover sensitive URLs via an HREF attribute associated with a redirecting URL.

Exploit likelihood

2.06%Down 2.3 points since Feb 4, 2022

What each source reports

NVD Score used 4.3

Record: CVE-2010-1393
CVSS 2.0: 4.3 MediumAV:N/AC:M/Au:N/C:P/I:N/A:N
Weakness: CWE-200
Updated: 2026-11-02

CVE List No score

Record: CVE-2010-1393
Updated: 2026-11-02

EUVDEUVD-2010-1421 No score

Record: EUVD-2010-1421
Updated: 2026-11-03

GitHub AdvisoriesGHSA-5hhp-8vjg-5r59 No score

The Cascading Style Sheets (CSS) implementation in WebKit in Apple Safari before 5.0 on Mac OS X...

Record: GHSA-5hhp-8vjg-5r59
Weakness: CWE-200
Updated: 2026-11-02

Affected products

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2010-1393 is a medium vulnerability (CVSS 4.3) in Apple Safari, published June 11, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.06%, the 81st percentile. No source names a fixed version.

References

Show 17 moreShow less