CVE-2010-1398
WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on...
WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, does not properly perform ordered list insertions, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document, related to the insertion of an unspecified element into an editable container and the access of an uninitialized element.
Exploit likelihood
What each source reports
NVD Score used
WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, does not properly perform ordered list insertions, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document, related to the insertion of an unspecified element into an editable container and the access of an uninitialized element.
- Record
CVE-2010-1398- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, does not properly perform ordered list insertions, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document, related to the insertion of an unspecified element into an editable container and the access of an uninitialized element.
- Record
CVE-2010-1398- Updated
- 2026-11-02
EUVDEUVD-2010-1426 No score
WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, does not properly perform ordered list insertions, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document, related to the insertion of an unspecified element into an editable container and the access of an uninitialized element.
- Record
EUVD-2010-1426- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-3wrm-vgg9-6v7h No score
WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on...
WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, does not properly perform ordered list insertions, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document, related to the insertion of an unspecified element into an editable container and the access of an uninitialized element.
- Record
GHSA-3wrm-vgg9-6v7h- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-1398 is a high vulnerability (CVSS 9.3) in Apple Safari, published June 11, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 8.56%, the 95th percentile. No source names a fixed version.
References
mandriva.com/security/advisories?name=MDVSA-2011:039
support.apple.com/kb/HT4220
zerodayinitiative.com/advisories/ZDI-10-097
vupen.com/english/advisories/2010/2722
secunia.com/advisories/43068
ubuntu.com/usn/USN-1006-1
Show 19 moreShow less
lists.apple.com/archives/security-announce/2010/Jun/msg00000.html
securityfocus.com/archive/1/511719/100/0/threaded
lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
securitytracker.com/id?1024067
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7556
nvd.nist.gov/vuln/detail/CVE-2010-1398
github.com/advisories/GHSA-3wrm-vgg9-6v7h