CVE-2010-1805: Apple Safari

Medium severity, CVSS 6.9. EPSS: 0.3% chance of exploitation in the next 30 days.

Untrusted search path vulnerability in Apple Safari 4.x before 4.1.2 and 5.x before 5.0.2 on Windows allows local users to gain privileges via a Trojan horse explorer.exe (aka Windows Explorer) program in a directory containing a file that had been downloaded by Safari.

Affected products

• Apple Safari: version 4.0 only; version 4.0.0b only; version 4.0.1 only; version 4.0.2 only; version 4.0.3 only; version 4.0.4 only; …

Published 2010-09-10. Last modified 2026-06-16.