CVE-2010-1386: Apple Webkit

High severity, CVSS 10.0. EPSS: 2.1% chance of exploitation in the next 30 days.

page/Geolocation.cpp in WebCore in WebKit before r56188 and before 1.2.5 does not properly restrict access to the lastPosition function, which has unspecified impact and remote attack vectors, aka rdar problem 7746357.

Affected products

• Apple Webkit: up to and including r56187; version r50173 only

Published 2010-08-19. Last modified 2026-06-16.