Approved changes feed: RSS · Atom

cpe:2.3:a:apple:webkit:r50173:*:*:*:*:*:*:*

part: a version: r50173 update: *

VendorApple (c2b419d0-9f0f-51c1-88dc-2e204a98e1c7)
ProductWebkit (a3ff314b-12de-5446-8d83-a0aa2df82efd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/webkit/webkit purl2cpe 2026-06-01 10:12:26.247431
pkg:webkit/webkit purl2cpe 2026-06-01 10:12:26.247433

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2010-1760 vulnerable 2026-06-08 04:54:10.198241 Details available
loader/DocumentThreadableLoader.cpp in the XMLHttpRequest implementation in WebCore in WebKit before r58409 does not properly handle credentials during a cross-origin synchronous request, which has unspecified impact and remote attack vectors, aka rdar problem 7905150.
Published: 2010-08-19T20:00:00.000Z
Updated: 2024-08-07T01:35:53.617Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-1386 vulnerable 2026-06-08 04:54:07.449867 Details available
page/Geolocation.cpp in WebCore in WebKit before r56188 and before 1.2.5 does not properly restrict access to the lastPosition function, which has unspecified impact and remote attack vectors, aka rdar problem 7746357.
Published: 2010-08-19T20:00:00.000Z
Updated: 2024-08-07T01:21:18.957Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.