CVE-2008-1010: Apple Safari

Medium severity, CVSS 6.8. EPSS: 4.6% chance of exploitation in the next 30 days.

Buffer overflow in WebKit, as used in Apple Safari before 3.1, allows remote attackers to execute arbitrary code via crafted regular expressions in JavaScript.

Affected products

• Apple Safari: version 0.8 only; version 0.9 only; version 1.0 only; version 1.1 only; version 1.2 only; version 1.3 only; …

Published 2008-03-19. Last modified 2026-06-16.