CVE-2007-2580: Apple Safari

Low severity, CVSS 1.9. EPSS: 0.7% chance of exploitation in the next 30 days.

Unspecified vulnerability in Apple Safari allows local users to obtain sensitive information (saved keychain passwords) via the document.loginform.password.value JavaScript parameter loaded from an AppleScript script.

Affected products

• Apple Safari: any version

Published 2007-05-09. Last modified 2026-06-16.