CVE-2007-3186: Apple Safari

High severity, CVSS 9.3. EPSS: 4.9% chance of exploitation in the next 30 days.

Apple Safari Beta 3.0.1 for Windows allows remote attackers to execute arbitrary commands via shell metacharacters in a URI in the SRC of an IFRAME, as demonstrated using a gopher URI.

Affected products

• Apple Safari: any version; version 2.0 only; version 2.0.1 only; version 2.0.2 only; version 2.0.3 only; version 2.0.4 only; …

Published 2007-06-12. Last modified 2026-06-16.