# CVEs published 2010-09-09 27 CVEs were published on September 9, 2010: 0 critical, 1 high. 1 is now in CISA KEV. Days are UTC. - [CVE-2010-1781](https://cve.now/CVE-2010-1781.md): Double free vulnerability in WebKit in Apple iOS before 4.1 on the iPhone and iPod touch allows remote attackers to execute arbitrary code o (no CVSS) - [CVE-2010-1809](https://cve.now/CVE-2010-1809.md): The Accessibility component in Apple iOS before 4.1 on the iPhone and iPod touch does not perform the expected VoiceOver announcement associ (no CVSS) - [CVE-2010-1810](https://cve.now/CVE-2010-1810.md): FaceTime in Apple iOS before 4.1 on the iPhone and iPod touch does not properly handle invalid X.509 certificates, which allows man-in-the-m (no CVSS) - [CVE-2010-1811](https://cve.now/CVE-2010-1811.md): ImageIO in Apple iOS before 4.1 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial of service (no CVSS) - [CVE-2010-1812](https://cve.now/CVE-2010-1812.md): Use-after-free vulnerability in WebKit in Apple iOS before 4.1 on the iPhone and iPod touch, and webkitgtk before 1.2.6, allows remote attac (no CVSS) - [CVE-2010-1813](https://cve.now/CVE-2010-1813.md): WebKit in Apple iOS before 4.1 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial of service ( (no CVSS) - [CVE-2010-1814](https://cve.now/CVE-2010-1814.md): WebKit in Apple iOS before 4.1 on the iPhone and iPod touch, and webkitgtk before 1.2.6, allows remote attackers to execute arbitrary code o (no CVSS) - [CVE-2010-1815](https://cve.now/CVE-2010-1815.md): Use-after-free vulnerability in WebKit in Apple iOS before 4.1 on the iPhone and iPod touch, and webkitgtk before 1.2.6, allows remote attac (no CVSS) - [CVE-2010-1817](https://cve.now/CVE-2010-1817.md): Buffer overflow in ImageIO in Apple iOS before 4.1 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a (no CVSS) - [CVE-2010-2883](https://cve.now/CVE-2010-2883.md): Stack-based buffer overflow in CoolType.dll in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows (CVSS 7.3, KEV) - [CVE-2010-3007](https://cve.now/CVE-2010-3007.md): Unspecified vulnerability in HP Data Protector Express, and Data Protector Express Single Server Edition (SSE), 3.x before build 56936 and 4 (no CVSS) - [CVE-2010-3017](https://cve.now/CVE-2010-3017.md): Unspecified vulnerability in RSA Access Manager Agent 4.7.1 before 4.7.1.7, when RSA Adaptive Authentication Integration is enabled, allows (no CVSS) - [CVE-2010-3018](https://cve.now/CVE-2010-3018.md): RSA Access Manager Server 5.5.3 before 5.5.3.172, 6.0.4 before 6.0.4.53, and 6.1 before 6.1.2.01 does not properly perform cache updates, wh (no CVSS) - [CVE-2010-2760](https://cve.now/CVE-2010-2760.md): Use-after-free vulnerability in the nsTreeSelection function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0 (no CVSS) - [CVE-2010-2762](https://cve.now/CVE-2010-2762.md): The XPCSafeJSObjectWrapper class in the SafeJSObjectWrapper (aka SJOW) implementation in Mozilla Firefox 3.6.x before 3.6.9 and Thunderbird (no CVSS) - [CVE-2010-2763](https://cve.now/CVE-2010-2763.md): The XPCSafeJSObjectWrapper class in the SafeJSObjectWrapper (aka SJOW) implementation in Mozilla Firefox before 3.5.12, Thunderbird before 3 (no CVSS) - [CVE-2010-2764](https://cve.now/CVE-2010-2764.md): Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 do not pro (no CVSS) - [CVE-2010-2765](https://cve.now/CVE-2010-2765.md): Integer overflow in the FRAMESET element implementation in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 an (no CVSS) - [CVE-2010-2766](https://cve.now/CVE-2010-2766.md): The normalizeDocument function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and (no CVSS) - [CVE-2010-2767](https://cve.now/CVE-2010-2767.md): The navigator.plugins implementation in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1. (no CVSS) - [CVE-2010-2768](https://cve.now/CVE-2010-2768.md): Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 do not pro (no CVSS) - [CVE-2010-2769](https://cve.now/CVE-2010-2769.md): Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before (no CVSS) - [CVE-2010-2770](https://cve.now/CVE-2010-2770.md): Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 on Mac OS (no CVSS) - [CVE-2010-3166](https://cve.now/CVE-2010-3166.md): Heap-based buffer overflow in the nsTextFrameUtils::TransformText function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderb (no CVSS) - [CVE-2010-3167](https://cve.now/CVE-2010-3167.md): The nsTreeContentView function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and (no CVSS) - [CVE-2010-3168](https://cve.now/CVE-2010-3168.md): Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 do not pro (no CVSS) - [CVE-2010-3169](https://cve.now/CVE-2010-3169.md): Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2010-09-09 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.