CVE-2009-0162: Cross-site scripting (XSS) vulnerability in Safari before 3.2.3, and 4 Public Beta, on Apple Mac OS X 10.5...

Security readout for executives and security teams

This is an old Safari flaw where a malicious feed link could cause Safari to run attacker-supplied script or HTML. Business risk is mainly from legacy Macs or Windows systems still running affected Safari versions. Modern environments are unlikely to be exposed unless unsupported browser builds remain in use. Exposure is most plausible on unmanaged legacy endpoints running Safari before 3.2.3, Safari 4 Public Beta, or Mac OS X 10.5 before 10.5.7. Current Apple-supported browsers are not indicated as affected in the supplied sources. Treat this as a legacy technology hygiene issue, not an urgent internet-wide emergency based on the supplied evidence. Prioritize discovery and removal of unsupported Safari builds, especially on unmanaged or kiosk-like systems. Mitigation focus: Upgrade affected Safari installations to 3.2.3 or later where applicable.; Update Mac OS X 10.5 systems to 10.5.7 or later where applicable.; Remove Safari 4 Public Beta from managed endpoints..

Prepared

Jun 28, 2026, 10:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.