{"id":"CVE-2012-0585","aliases":["EUVD-2012-0617","GHSA-9g46-7gm4-v6gc"],"status":"published","title":"The Private Browsing feature in Safari in Apple iOS before 5.1 allows remote attackers to bypass...","description":"The Private Browsing feature in Safari in Apple iOS before 5.1 allows remote attackers to bypass intended privacy settings and insert history entries via JavaScript code that calls the (1) pushState or (2) replaceState method.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02507,"percentile":0.84857,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-264"],"published":"2012-03-08T22:00:00Z","modified":"2026-06-16T23:37:52Z","products":[{"vendor":"apple","product":"iphone_os"}],"references":[{"url":"http://www.securitytracker.com/id?1026774","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/48377","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Third Party Advisory"]},{"url":"http://osvdb.org/79964","tags":["vdb-entry","x_refsource_OSVDB","x_transferred","Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/73871","tags":["vdb-entry","x_refsource_XF","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html","tags":["vendor-advisory","x_refsource_APPLE","x_transferred","Mailing List","Vendor Advisory"]},{"url":"http://secunia.com/advisories/48288","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html","tags":["vendor-advisory","x_refsource_APPLE","x_transferred","Mailing List","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-0585"},{"url":"https://github.com/advisories/GHSA-9g46-7gm4-v6gc"}],"sources":{"cve":[{"id":"CVE-2012-0585","description":"The Private Browsing feature in Safari in Apple iOS before 5.1 allows remote attackers to bypass intended privacy settings and insert history entries via JavaScript code that calls the (1) pushState or (2) replaceState method.","status":"published","published":"2012-03-08T22:00:00Z","modified":"2024-08-06T18:30:52.931Z","updated_at":"2026-11-02T14:34:52.981189Z"}],"euvd":[{"id":"EUVD-2012-0617","description":"The Private Browsing feature in Safari in Apple iOS before 5.1 allows remote attackers to bypass intended privacy settings and insert history entries via JavaScript code that calls the (1) pushState or (2) replaceState method.","status":"published","published":"2012-03-08T22:00:00Z","modified":"2024-08-06T18:30:52Z","updated_at":"2026-11-03T01:56:21.302523Z"}],"ghsa":[{"id":"GHSA-9g46-7gm4-v6gc","title":"The Private Browsing feature in Safari in Apple iOS before 5.1 allows remote attackers to bypass...","description":"The Private Browsing feature in Safari in Apple iOS before 5.1 allows remote attackers to bypass intended privacy settings and insert history entries via JavaScript code that calls the (1) pushState or (2) replaceState method.","status":"published","published":"2022-05-14T01:55:48Z","modified":"2023-02-02T05:04:59Z","updated_at":"2026-11-02T14:51:59.92181Z"}],"nvd":[{"id":"CVE-2012-0585","description":"The Private Browsing feature in Safari in Apple iOS before 5.1 allows remote attackers to bypass intended privacy settings and insert history entries via JavaScript code that calls the (1) pushState or (2) replaceState method.","status":"published","published":"2012-03-08T22:55:01.823Z","modified":"2026-06-16T23:37:52.527Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-264"],"updated_at":"2026-11-02T14:02:13.468343Z"}]}}