CVE-2009-2027: Apple Safari

High severity, CVSS 7.2. EPSS: 0.3% chance of exploitation in the next 30 days.

The Installer in Apple Safari before 4.0 on Windows allows local users to gain privileges by checking a box that specifies an immediate launch of the application after installation, related to an unspecified compression method.

Affected products

• Apple Safari: up to and including 3.2.3; version 3.0 only; version 3.0.1 only; version 3.0.2 only; version 3.0.3 only; version 3.0.4 only; …

Published 2009-06-10. Last modified 2026-06-16.