CVE-2008-3644: Apple Safari before 3.2 does not properly prevent caching of form data for form fields that have autocomple...

Security readout for executives and security teams

Safari versions before 3.2 could leave sensitive form data in the browser page cache even when autocomplete was disabled. A person with local access to the same computer could recover that information from the cache. This is primarily a legacy endpoint and shared-device risk. Exposure is limited to systems running Apple Safari before 3.2. Risk is most relevant on old Macs, shared workstations, kiosks, labs, or recovered legacy devices where multiple users can access the same local profile or cache. Treat this as a legacy hygiene issue unless old Safari remains in use. It is not currently KEV-listed, but it can expose credentials, personal data, or business form entries on shared or reused machines. Mitigation focus: Upgrade affected Safari installations to version 3.2 or later per Apple guidance.; Prioritize shared, kiosk, lab, and legacy Mac endpoints for review.; Clear browser caches on systems where sensitive form data may have been entered..

Prepared

Jun 28, 2026, 11:59 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.