CVE-2011-0217: Apple Safari

Medium severity, CVSS 4.3. EPSS: 1% chance of exploitation in the next 30 days.

Apple Safari before 5.0.6 provides AutoFill information to scripts that execute before HTML form submission, which allows remote attackers to obtain Address Book information via a crafted form, as demonstrated by a form that includes non-visible fields.

Affected products

• Apple Safari: up to and including 5.0.5; version 1.0 only; version 1.0.0 only; version 1.0.0b1 only; version 1.0.0b2 only; version 1.0.1 only; …

Published 2011-07-21. Last modified 2026-06-16.