CVE-2010-0051

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-03-15 · updated 2026-06-16
Weakness: CWE-20

Description

WebKit in Apple Safari before 4.0.5 does not properly validate the cross-origin loading of stylesheets, which allows remote attackers to obtain sensitive information via a crafted HTML document. NOTE: this might overlap CVE-2010-0651.

Affected products

Apple Safari: through 4.0.4; 4.0, 4.0.0b, 4.0.1, 4.0.2, 4.0.3

References

http://code.google.com/p/chromium/issues/detail?id=9877
http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html
http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html
http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
http://osvdb.org/62944
http://scarybeastsecurity.blogspot.com/2009/12/generic-cross-browser-cross-domain.html
http://secunia.com/advisories/41856
http://secunia.com/advisories/42314
http://secunia.com/advisories/43068
http://support.apple.com/kb/HT4070
http://support.apple.com/kb/HT4225

Get alerted when CVE-2010-0051 or the next vulnerability affects your stack