CVE-2010-1387: Apple iPhone OS

High severity, CVSS 9.3. EPSS: 6.1% chance of exploitation in the next 30 days.

Use-after-free vulnerability in JavaScriptCore in WebKit in Apple iTunes before 9.2 on Windows, and Apple iOS before 4 on the iPhone and iPod touch, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to page transitions, a different vulnerability than CVE-2010-1763 and CVE-2010-1769.

Affected products

• Apple iPhone OS: up to and including 3.2.1; version 1.0.0 only; version 1.0.1 only; version 1.0.2 only; version 1.1.0 only; version 1.1.1 only; …
• Apple iTunes: up to and including 9.0.3; version 4.0.0 only; version 4.0.1 only; version 4.1.0 only; version 4.2.0 only; version 4.5 only; …

Published 2010-06-18. Last modified 2026-06-16.