Every CVE Search/ Get API key

CVE-2010-1785

WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1...

9.3 High

WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; accesses uninitialized memory during processing of the (1) :first-letter and (2) :first-line pseudo-elements in an SVG text element, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted document.

Exploit likelihood

6.08%Down 0.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 9.3

WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; accesses uninitialized memory during processing of the (1) :first-letter and (2) :first-line pseudo-elements in an SVG text element, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted document.

Record
CVE-2010-1785
CVSS 2.0
9.3 HighAV:N/AC:M/Au:N/C:C/I:C/A:C
Weakness
CWE-119
Updated
2026-11-02
CVE List No score

WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; accesses uninitialized memory during processing of the (1) :first-letter and (2) :first-line pseudo-elements in an SVG text element, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted document.

Record
CVE-2010-1785
Updated
2026-11-02
EUVDEUVD-2010-1805 No score

WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; accesses uninitialized memory during processing of the (1) :first-letter and (2) :first-line pseudo-elements in an SVG text element, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted document.

Record
EUVD-2010-1805
Updated
2026-11-03
GitHub AdvisoriesGHSA-889q-fj7g-jv5v No score

WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1...

WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; accesses uninitialized memory during processing of the (1) :first-letter and (2) :first-line pseudo-elements in an SVG text element, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted document.

Record
GHSA-889q-fj7g-jv5v
Weakness
CWE-119
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
webkitgtk
Red Hat:enterprise_linux:6::client
From an advisory covering 30 CVEs
 before 0:1.2.6-2.el6_0
0:1.2.6-2.el6_0
webkitgtk-debuginfo
Red Hat:enterprise_linux:6::client
From an advisory covering 30 CVEs
 before 0:1.2.6-2.el6_0
0:1.2.6-2.el6_0
webkitgtk-devel
Red Hat:enterprise_linux:6::client
From an advisory covering 30 CVEs
 before 0:1.2.6-2.el6_0
0:1.2.6-2.el6_0
webkitgtk-doc
Red Hat:enterprise_linux:6::client
From an advisory covering 30 CVEs
 before 0:1.2.6-2.el6_0
0:1.2.6-2.el6_0
webkitgtk
Red Hat:enterprise_linux:6::computenode
From an advisory covering 30 CVEs
 before 0:1.2.6-2.el6_0
0:1.2.6-2.el6_0
webkitgtk-debuginfo
Red Hat:enterprise_linux:6::computenode
From an advisory covering 30 CVEs
 before 0:1.2.6-2.el6_0
0:1.2.6-2.el6_0
webkitgtk-devel
Red Hat:enterprise_linux:6::computenode
From an advisory covering 30 CVEs
 before 0:1.2.6-2.el6_0
0:1.2.6-2.el6_0
webkitgtk-doc
Red Hat:enterprise_linux:6::computenode
From an advisory covering 30 CVEs
 before 0:1.2.6-2.el6_0
0:1.2.6-2.el6_0
webkitgtk
Red Hat:enterprise_linux:6::server
From an advisory covering 30 CVEs
 before 0:1.2.6-2.el6_0
0:1.2.6-2.el6_0
webkitgtk-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 30 CVEs
 before 0:1.2.6-2.el6_0
0:1.2.6-2.el6_0
Show 6 moreShow less
Affected packages
PackageAffectedFixed
webkitgtk-devel
Red Hat:enterprise_linux:6::server
From an advisory covering 30 CVEs
 before 0:1.2.6-2.el6_0
0:1.2.6-2.el6_0
webkitgtk-doc
Red Hat:enterprise_linux:6::server
From an advisory covering 30 CVEs
 before 0:1.2.6-2.el6_0
0:1.2.6-2.el6_0
webkitgtk
Red Hat:enterprise_linux:6::workstation
From an advisory covering 30 CVEs
 before 0:1.2.6-2.el6_0
0:1.2.6-2.el6_0
webkitgtk-debuginfo
Red Hat:enterprise_linux:6::workstation
From an advisory covering 30 CVEs
 before 0:1.2.6-2.el6_0
0:1.2.6-2.el6_0
webkitgtk-devel
Red Hat:enterprise_linux:6::workstation
From an advisory covering 30 CVEs
 before 0:1.2.6-2.el6_0
0:1.2.6-2.el6_0
webkitgtk-doc
Red Hat:enterprise_linux:6::workstation
From an advisory covering 30 CVEs
 before 0:1.2.6-2.el6_0
0:1.2.6-2.el6_0

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2010-1785 is a high vulnerability (CVSS 9.3) in Apple Safari, published July 30, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.08%, the 93rd percentile. No source names a fixed version.

References

Show 129 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open