CVE-2010-3829: Apple iPhone OS

Medium severity, CVSS 5.8. EPSS: 2.4% chance of exploitation in the next 30 days.

WebKit in Apple iOS before 4.2 allows remote attackers to bypass the remote image loading setting in Mail via an HTML LINK element with a DNS prefetching property, as demonstrated by an HTML e-mail message that uses a LINK element for X-Confirm-Reading-To functionality, a related issue to CVE-2010-3813.

Affected products

• Apple iPhone OS: up to and including 4.1; version 1.0.0 only; version 1.0.1 only; version 1.0.2 only; version 1.1.0 only; version 1.1.1 only; …

Published 2010-11-26. Last modified 2026-06-16.