CVE-2013-0974: Apple iPhone OS

Medium severity, CVSS 5.1. EPSS: 1.2% chance of exploitation in the next 30 days.

StoreKit in Apple iOS before 6.1 does not properly handle the disabling of JavaScript within the preferences configuration of Mobile Safari, which allows remote attackers to bypass intended access restrictions and execute JavaScript code via a web site with a Smart App Banner.

Affected products

• Apple iPhone OS: up to and including 6.0.2; version 6.0 only; version 6.0.1 only

Published 2013-01-29. Last modified 2026-06-16.