CVE-2010-1823: Apple iTunes

High severity, CVSS 9.3. EPSS: 3.3% chance of exploitation in the next 30 days.

Use-after-free vulnerability in WebKit before r65958, as used in Google Chrome before 6.0.472.59, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger use of document APIs such as document.close during parsing, as demonstrated by a Cascading Style Sheets (CSS) file referencing an invalid SVG font, aka rdar problem 8442098.

Affected products

• Apple iTunes: before 10.5 (fixed in 10.5)
• Apple Safari: before 5.0.6 (fixed in 5.0.6)
• Google Chrome: before 6.0.472.59 (fixed in 6.0.472.59)

Published 2010-09-24. Last modified 2026-06-16.