CVE-2010-0044: Apple Safari

Medium severity, CVSS 4.3. EPSS: 1.5% chance of exploitation in the next 30 days.

PubSub in Apple Safari before 4.0.5 does not properly implement use of the Accept Cookies preference to block cookies, which makes it easier for remote web servers to track users by setting a cookie in a (1) RSS or (2) Atom feed.

Affected products

• Apple Safari: up to and including 4.0.4; version 4.0 only; version 4.0.0b only; version 4.0.1 only; version 4.0.2 only; version 4.0.3 only

Published 2010-03-15. Last modified 2026-06-16.