CVE-2013-1012
Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 6.0.5 allows remote...
CVE-2013-1012 is a medium vulnerability (CVSS 4.3) in Apple Safari, published June 5, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.77%, the 78th percentile. No source names a fixed version.
Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 6.0.5 allows remote attackers to inject arbitrary web script or HTML via vectors involving IFRAME elements.
Exploit likelihood
What each source reports
NVD Score used
Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 6.0.5 allows remote attackers to inject arbitrary web script or HTML via vectors involving IFRAME elements.
- Record
CVE-2013-1012- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
CVE List No score
Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 6.0.5 allows remote attackers to inject arbitrary web script or HTML via vectors involving IFRAME elements.
- Record
CVE-2013-1012- Updated
- 2026-11-02
EUVDEUVD-2013-1052 No score
Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 6.0.5 allows remote attackers to inject arbitrary web script or HTML via vectors involving IFRAME elements.
- Record
EUVD-2013-1052- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-65p2-j4g9-gxhr No score
Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 6.0.5 allows remote...
Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 6.0.5 allows remote attackers to inject arbitrary web script or HTML via vectors involving IFRAME elements.
- Record
GHSA-65p2-j4g9-gxhr- Weakness
- CWE-79
- Updated
- 2026-11-02
OSVUBUNTU-CVE-2013-1012 No score
Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 6.0.5 allows remote attackers to inject arbitrary web script or HTML via vectors involving IFRAME elements.
- Record
UBUNTU-CVE-2013-1012- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
qtwebkit-opensource-srcUbuntu:16.04:LTS |
All versions, plus listed versions 5.4.2+dfsg-1ubuntu2.15.5.1+dfsg-2ubuntu1 |
None known |
qtwebkit-sourceUbuntu:16.04:LTS |
All versions, plus listed versions 2.3.2-0ubuntu102.3.2-0ubuntu11 |
None known |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
support.apple.com/kb/HT5785
secunia.com/advisories/54886
lists.apple.com/archives/security-announce/2013/Jun/msg00001.html
nvd.nist.gov/vuln/detail/CVE-2013-1012
github.com/advisories/GHSA-65p2-j4g9-gxhr
ubuntu.com/security/CVE-2013-1012
cve.org/CVERecord?id=CVE-2013-1012