CVE-2012-0676: Apple Safari

Medium severity, CVSS 5.0. EPSS: 2.1% chance of exploitation in the next 30 days.

WebKit in Apple Safari before 5.1.7 does not properly track state information during the processing of form input, which allows remote attackers to fill in form fields on the pages of arbitrary web sites via unspecified vectors.

Affected products

• Apple Safari: up to and including 5.1.6; version 1.0 only; version 1.0.0 only; version 1.0.0b1 only; version 1.0.0b2 only; version 1.0.1 only; …

Published 2012-05-11. Last modified 2026-06-16.