CVE-2007-2399

HIGH · CVSS 9.3 EPSS 7.29%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2007-06-25 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2007-2399

Severity

HIGH

CVSS

9.3

EPSS

7.29%

Original Filing — NVD Description

WebKit in Apple Mac OS X 10.3.9, 10.4.9 and later, and iPhone before 1.0.1 performs an "invalid type conversion", which allows remote attackers to execute arbitrary code via unspecified frame sets that trigger memory corruption.