CVE-2011-0169
WebKit in Apple Safari before 5.0.4, when the Web Inspector is used, does not properly handle the...
CVE-2011-0169 is a low vulnerability (CVSS 2.6) in Apple Safari, published March 11, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.48%, the 73rd percentile. No source names a fixed version.
WebKit in Apple Safari before 5.0.4, when the Web Inspector is used, does not properly handle the window.console._inspectorCommandLineAPI property, which allows user-assisted remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via a crafted web site.
Exploit likelihood
What each source reports
NVD Score used
WebKit in Apple Safari before 5.0.4, when the Web Inspector is used, does not properly handle the window.console._inspectorCommandLineAPI property, which allows user-assisted remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via a crafted web site.
- Record
CVE-2011-0169- CVSS 2.0
- 2.6 Low
AV:N/AC:H/Au:N/C:N/I:P/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
CVE List No score
WebKit in Apple Safari before 5.0.4, when the Web Inspector is used, does not properly handle the window.console._inspectorCommandLineAPI property, which allows user-assisted remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via a crafted web site.
- Record
CVE-2011-0169- Updated
- 2026-11-02
EUVDEUVD-2011-0195 No score
WebKit in Apple Safari before 5.0.4, when the Web Inspector is used, does not properly handle the window.console._inspectorCommandLineAPI property, which allows user-assisted remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via a crafted web site.
- Record
EUVD-2011-0195- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-h749-7h9c-cq2g No score
WebKit in Apple Safari before 5.0.4, when the Web Inspector is used, does not properly handle the...
WebKit in Apple Safari before 5.0.4, when the Web Inspector is used, does not properly handle the window.console._inspectorCommandLineAPI property, which allows user-assisted remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via a crafted web site.
- Record
GHSA-h749-7h9c-cq2g- Weakness
- CWE-79
- Updated
- 2026-11-02
OSVUBUNTU-CVE-2011-0169 No score
WebKit in Apple Safari before 5.0.4, when the Web Inspector is used, does not properly handle the window.console._inspectorCommandLineAPI property, which allows user-assisted remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via a crafted web site.
- Record
UBUNTU-CVE-2011-0169- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
qtwebkit-sourceUbuntu:16.04:LTS |
All versions, plus listed versions 2.3.2-0ubuntu102.3.2-0ubuntu11 |
None known |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
exchange.xforce.ibmcloud.com/vulnerabilities/66006
support.apple.com/kb/HT4566
securityfocus.com/bid/46809
securitytracker.com/id?1025183
lists.apple.com/archives/security-announce/2011//Mar/msg00004.html
nvd.nist.gov/vuln/detail/CVE-2011-0169
github.com/advisories/GHSA-h749-7h9c-cq2g
ubuntu.com/security/CVE-2011-0169
cve.org/CVERecord?id=CVE-2011-0169