CVE-2010-0044

PubSub in Apple Safari before 4.0.5 does not properly implement use of the Accept Cookies preference to block cookies, which makes it easier for remote web servers to track users by setting a cookie in a (1) RSS or (2) Atom feed.

• CWE-16

• http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.htmlVendor Advisory
• http://osvdb.org/62937
• http://support.apple.com/kb/HT4070Vendor Advisory
• http://www.securityfocus.com/bid/38671Patch
• http://www.securityfocus.com/bid/38675Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/56830
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7051
• http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.htmlVendor Advisory
• http://osvdb.org/62937
• http://support.apple.com/kb/HT4070Vendor Advisory
• http://www.securityfocus.com/bid/38671Patch
• http://www.securityfocus.com/bid/38675Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/56830
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7051

Published

Mar 15, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-0038Recovery Mode in Apple iPhone OS 1.0 through 3.1.2, and iPho…
• CVE-2010-0039The Application-Level Gateway (ALG) on the Apple Time Capsul…
• CVE-2010-0040Integer overflow in ColorSync in Apple Safari before 4.0.5 o…
• CVE-2010-0041ImageIO in Apple Safari before 4.0.5 and iTunes before 9.1 o…
• CVE-2010-0042ImageIO in Apple Safari before 4.0.5 and iTunes before 9.1 o…
• CVE-2010-0043ImageIO in Apple Safari before 4.0.5 and iTunes before 9.1 o…
• CVE-2010-0045Apple Safari before 4.0.5 on Windows does not properly valid…
• CVE-2010-0046The Cascading Style Sheets (CSS) implementation in WebKit in…
• CVE-2010-0047Use-after-free vulnerability in WebKit in Apple Safari befor…8.8
• CVE-2010-0048Use-after-free vulnerability in WebKit in Apple Safari befor…8.8
• CVE-2010-0049Use-after-free vulnerability in WebKit in Apple Safari befor…
• CVE-2010-0050Use-after-free vulnerability in WebKit in Apple Safari befor…8.8