CVE-2014-1390: WebKit, as used in Apple Safari before 6.1.6 and 7.x before 7.0.6, allows remote attackers to execute arbit...

Security readout for executives and security teams

CVE-2014-1390 is an old WebKit memory-corruption issue in Apple Safari. A malicious website could crash the browser or potentially run code on the user’s system. The sources name Safari before 6.1.6 and Safari 7.x before 7.0.6. No provided source confirms active exploitation. Exposure is most likely on legacy Apple systems still running Safari before 6.1.6 or Safari 7.x before 7.0.6. Modern managed fleets are unlikely to be exposed unless old browsers remain in use for compatibility, testing, kiosks, or unmanaged endpoints. Prioritize remediation where legacy Safari is still used for internet browsing. The business risk is user-driven compromise from web content, but the age of the issue means exposure should be narrow in a well-managed fleet. Mitigation focus: Update affected Safari installations to 6.1.6, 7.0.6, or later supported versions.; Retire unsupported Apple systems that cannot receive Safari or WebKit security updates.; Restrict legacy browsers from accessing untrusted websites where replacement is delayed..

Prepared

Jun 14, 2026, 07:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.