CVE-2009-1060: Apple Safari

High severity, CVSS 9.3. EPSS: 4.6% chance of exploitation in the next 30 days.

Unspecified vulnerability in Apple Safari on Mac OS X 10.5.6 allows remote attackers to execute arbitrary code via unknown vectors triggered by clicking on a link, as demonstrated by Charlie Miller during a PWN2OWN competition at CanSecWest 2009.

Affected products

• Apple Safari: any version

Published 2009-03-24. Last modified 2026-06-16.