CVE-2010-1800: Apple Cfnetwork

Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days.

CFNetwork in Apple Mac OS X 10.6.3 and 10.6.4 supports anonymous SSL and TLS connections, which allows man-in-the-middle attackers to redirect a connection and obtain sensitive information via crafted responses.

Affected products

• Apple Cfnetwork: any version
• Apple Mac OS X: version 10.6.3 only; version 10.6.4 only
• Apple Mac OS X Server: version 10.6.3 only; version 10.6.4 only

Published 2010-08-25. Last modified 2026-06-16.