CVE-2009-1682: Apple Safari

Medium severity, CVSS 4.3. EPSS: 1.1% chance of exploitation in the next 30 days.

Apple Safari before 4.0 does not properly check for revoked Extended Validation (EV) certificates, which makes it easier for remote attackers to trick a user into accepting an invalid certificate.

Affected products

• Apple Safari: up to and including 4.0_beta; version 0.8 only; version 0.9 only; version 1.0 only; version 1.0.3 only; version 1.1 only; …

Published 2009-06-10. Last modified 2026-06-16.