CVE-2010-0044

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-03-15 · updated 2026-06-16
Weakness: CWE-16

Description

PubSub in Apple Safari before 4.0.5 does not properly implement use of the Accept Cookies preference to block cookies, which makes it easier for remote web servers to track users by setting a cookie in a (1) RSS or (2) Atom feed.

Affected products

Apple Safari: through 4.0.4; 4.0, 4.0.0b, 4.0.1, 4.0.2, 4.0.3

References

http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html
http://osvdb.org/62937
http://support.apple.com/kb/HT4070
http://www.securityfocus.com/bid/38671
http://www.securityfocus.com/bid/38675
https://exchange.xforce.ibmcloud.com/vulnerabilities/56830
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7051
http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html
http://osvdb.org/62937
http://support.apple.com/kb/HT4070
http://www.securityfocus.com/bid/38671
http://www.securityfocus.com/bid/38675

Get alerted when CVE-2010-0044 or the next vulnerability affects your stack