CVE-2009-1680

Severity: low (CVSS 2.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-06-19 · updated 2026-06-16
Weakness: CWE-200

Description

Safari in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly clear the search history when it is cleared from the Settings application, which allows physically proximate attackers to obtain the search history.

Affected products

Apple Iphone Os: 1.0.0, 1.0.1, 1.0.2, 1.1.0, 1.1.1, 1.1.2 (+11)
Apple Ipod Touch: all versions

References

http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html
http://osvdb.org/55240
http://support.apple.com/kb/HT3639
http://www.securityfocus.com/bid/35414
http://www.securityfocus.com/bid/35448
http://www.vupen.com/english/advisories/2009/1621
http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html
http://osvdb.org/55240
http://support.apple.com/kb/HT3639
http://www.securityfocus.com/bid/35414
http://www.securityfocus.com/bid/35448
http://www.vupen.com/english/advisories/2009/1621

Get alerted when CVE-2009-1680 or the next vulnerability affects your stack