AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2009-0137

HIGH · CVSS 10 EPSS 3.20%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2009-02-13 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2009-0137
Severity
HIGH
CVSS
10
EPSS
3.20%
Windows Java

Original NVD Description

Multiple unspecified vulnerabilities in Safari RSS in Apple Mac OS X 10.4.11 and 10.5.6, and Windows XP and Vista, allow remote attackers to execute arbitrary JavaScript in the local security zone via a crafted feed: URL, related to "input validation issues."