https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T21:05:26.984481+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2009-avi-496 certa-2009-avi-496 — De multiples vulnérabilités dans Apple Safari permettent entre autres l'exécution de code arbitraire à distance. 2026-10-03T21:05:27.050865+00:00 certa-2009-avi-496 https://cve.radiocsirt.org/vuln/euvd-2026-123720 EUVD-2026-123720 2026-10-03T21:05:27.050906+00:00 EUVD-2026-123720 https://cve.radiocsirt.org/vuln/fkie_cve-2009-2841 fkie_cve-2009-2841 2026-10-03T21:05:27.050921+00:00

The HTMLMediaElement::loadResource function in html/HTMLMediaElement.cpp in WebCore in WebKit before r49480, as used in Apple Safari before 4.0.4 on Mac OS X, does not perform the expected callbacks for HTML 5 media elements that have external URLs for media resources, which allows remote attackers to trigger sub-resource requests to arbitrary web sites via a crafted HTML document, as demonstrated by an HTML e-mail message that uses a media element for X-Confirm-Reading-To functionality, aka rdar problem 7271202.

 https://cve.radiocsirt.org/vuln/ghsa-rrp5-fpqr-wrqg GHSA-rrp5-fpqr-wrqg 2026-10-03T21:05:27.050953+00:00

The HTMLMediaElement::loadResource function in html/HTMLMediaElement.cpp in WebCore in WebKit before r49480, as used in Apple Safari before 4.0.4 on Mac OS X, does not perform the expected callbacks for HTML 5 media elements that have external URLs for media resources, which allows remote attackers to trigger sub-resource requests to arbitrary web sites via a crafted HTML document, as demonstrated by an HTML e-mail message that uses a media element for X-Confirm-Reading-To functionality, aka rdar problem 7271202.

 https://cve.radiocsirt.org/vuln/gsd-2009-2841 gsd-2009-2841 2026-10-03T21:05:27.050971+00:00 gsd-2009-2841