CVE-2007-3756

Safari in Apple iPhone 1.1.1, and Safari 3 before Beta Update 3.0.4 on Windows and Mac OS X 10.4...

4.3 Medium

Safari in Apple iPhone 1.1.1, and Safari 3 before Beta Update 3.0.4 on Windows and Mac OS X 10.4 through 10.4.10, allows remote attackers to obtain sensitive information via a crafted web page that identifies the URL of the parent window, even when the parent window is in a different domain.

Exploit likelihood

2.45%Down 1.0 points since Feb 4, 2022

What each source reports

NVD Score used 4.3

Record: CVE-2007-3756
CVSS 2.0: 4.3 MediumAV:N/AC:M/Au:N/C:P/I:N/A:N
Weakness: CWE-200
Updated: 2026-11-02

CVE List No score

Record: CVE-2007-3756
Updated: 2026-11-02

EUVDEUVD-2007-3740 No score

Record: EUVD-2007-3740
Updated: 2026-11-03

GitHub AdvisoriesGHSA-grh8-24vj-352c No score

Safari in Apple iPhone 1.1.1, and Safari 3 before Beta Update 3.0.4 on Windows and Mac OS X 10.4...

Record: GHSA-grh8-24vj-352c
Weakness: CWE-200
Updated: 2026-11-02

Affected products

apple safari

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	aliases, references, title	GitHub Advisories
Nov 2, 2026	first indexed	CVE List, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2007-3756 is a medium vulnerability (CVSS 4.3) in Apple Safari, published September 27, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.45%, the 84th percentile. No source names a fixed version.

References

Show 9 moreShow less