CVE-2010-1126: Apple Webkit

Medium severity, CVSS 5.8. EPSS: 1.8% chance of exploitation in the next 30 days.

The JavaScript implementation in WebKit allows remote attackers to send selected keystrokes to a form field in a hidden frame, instead of the intended form field in a visible frame, via certain calls to the focus method.

Affected products

• Apple Webkit: any version

Published 2010-03-26. Last modified 2026-06-16.