CVE-2009-1042: Apple Safari

High severity, CVSS 9.3. EPSS: 4.7% chance of exploitation in the next 30 days.

Unspecified vulnerability in Apple Safari on Mac OS X 10.5.6 allows remote attackers to execute arbitrary code via unknown vectors triggered by clicking on a link, as demonstrated by Nils during a PWN2OWN competition at CanSecWest 2009.

Affected products

• Apple Safari: any version

Published 2009-03-23. Last modified 2026-06-16.