Unscored severity · published Aug 19, 2010
CVE-2010-1386
page/Geolocation.cpp in WebCore in WebKit before r56188 and before 1.2.5 does not properly restrict access to the lastPosition function, which has unspecified impact and remote…
–
CVSS
2.1%
EPSS
No
On KEV
Description
page/Geolocation.cpp in WebCore in WebKit before r56188 and before 1.2.5 does not properly restrict access to the lastPosition function, which has unspecified impact and remote attack vectors, aka rdar problem 7746357.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.1% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WE
Webkit · Apple
through r56187; r50173 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-1386
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-1386
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
Vendor Advisory
http://secunia.com/advisories/41856
Vendor Advisory
http://secunia.com/advisories/43068
security-tracker.debian.org
http://security-tracker.debian.org/tracker/CVE-2010-1386
trac.webkit.org
http://trac.webkit.org/changeset/56188
www.mandriva.com
http://www.mandriva.com/security/advisories?name=MDVSA-2011:039
More from Webkit
8.8
CVE-2017-7160
An issue was discovered in certain Apple products
8.8
CVE-2017-7157
An issue was discovered in certain Apple products
8.8
CVE-2017-7156
An issue was discovered in certain Apple products
8.8
CVE-2017-13870
An issue was discovered in certain Apple products
8.8
CVE-2017-13866
An issue was discovered in certain Apple products