CVE-2014-1369

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-07-01 · updated 2026-06-17
Weakness: CWE-20

Description

WebKit in Apple Safari before 6.1.5 and 7.x before 7.0.5 allows user-assisted remote attackers to access file: URLs by leveraging a URL drag operation that originates at a crafted web site.

Affected products

Apple Safari: through 6.1.4; 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5 (+9)

References

http://archives.neohapsis.com/archives/bugtraq/2014-06/0171.html
http://www.securitytracker.com/id/1030495
http://archives.neohapsis.com/archives/bugtraq/2014-06/0171.html
http://www.securitytracker.com/id/1030495

Get alerted when CVE-2014-1369 or the next vulnerability affects your stack