CVE-2009-2198: Apple Garageband

Medium severity, CVSS 4.3. EPSS: 1.5% chance of exploitation in the next 30 days.

Apple GarageBand before 5.1 reconfigures Safari to accept all cookies regardless of domain name, which makes it easier for remote web servers to track users.

Affected products

• Apple Garageband: up to and including 5.0.2; version 4.1.1 only; version 4.1.2 only; version 5.0 only; version 5.0.1 only

Published 2009-08-04. Last modified 2026-06-16.