CVE-2009-0153: International Components for Unicode (ICU) 4.0, 3.6, and other 3.x versions, as used in Apple Mac OS X 10.5...

Security readout for executives and security teams

This is a 2009 ICU Unicode conversion flaw. Systems using affected ICU versions could mishandle malformed text and let an attacker bypass character handling in a way that may produce cross-site scripting in applications that render the converted text. Likely exposure is limited to legacy Apple Mac OS X 10.5 before 10.5.7, old iPhone/iPod touch OS releases, Fedora 9/10, and applications or appliances bundling affected ICU versions. Treat this as a legacy exposure cleanup item unless affected systems are internet-facing or embedded in a public web workflow. Prioritize unsupported platforms and bundled ICU copies that normal patching may miss. Mitigation focus: Apply relevant Apple, Red Hat, or Fedora security updates for ICU-related packages.; Upgrade or replace applications bundling ICU 4.0, 3.6, or other affected 3.x versions.; Check current vendor guidance for unsupported or embedded products using bundled ICU..

Prepared

Jun 28, 2026, 10:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.