VYPR
← All advisories
Unrated severityNVD Advisory· Published Jun 11, 2010· Updated Jun 16, 2026

CVE-2010-1389

CVE-2010-1389

Description

Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows user-assisted remote attackers to inject arbitrary web script or HTML via vectors involving a (1) paste or (2) drag-and-drop operation for a selection.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

10
  • Apple Inc./Safarillm-fuzzy8 versions
    < 5.0 on Mac OS X 10.5–10.6 & Windows; < 4.1 on Mac OS X 10.4+ 7 more
    • (no CPE)range: < 5.0 on Mac OS X 10.5–10.6 & Windows; < 4.1 on Mac OS X 10.4
    • cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*range: <=4.0.5
    • cpe:2.3:a:apple:safari:4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:safari:4.0.0b:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:safari:4.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:safari:4.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:safari:4.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:safari:4.0.4:*:*:*:*:*:*:*
  • Apple Inc./Webkitllm-fuzzy2 versions
    same as Safari versions above+ 1 more
    • (no CPE)range: same as Safari versions above
    • cpe:2.3:a:apple:webkit:*:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

17

News mentions

0

No linked articles in our index yet.