CVE-2012-0628: WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrar...

Security readout for executives and security teams

This is an old Apple WebKit memory-corruption flaw. A user who visited a maliciously crafted website could have their device or application crash, and the advisory says arbitrary code execution was possible. The sourced record identifies Apple iOS before 5.1 and iTunes before 10.6. Exposure is most plausible on legacy Apple assets still running iOS older than 5.1 or iTunes older than 10.6, especially where users can render web content. Modern, supported Apple environments are unlikely to be exposed, but that must be confirmed by inventory. Prioritize this for legacy asset review, not broad emergency response. The impact is serious, but the affected versions are from 2012 and the provided evidence does not show active exploitation. Mitigation focus: Apply Apple updates bringing iOS to 5.1 or later where applicable.; Apply Apple updates bringing iTunes to 10.6 or later where applicable.; Check Apple advisories for platform-specific update guidance..

Prepared

Jun 24, 2026, 12:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.