CVE-2011-0219
No fix known EPSS 2%
Apple Safari before 5.0.6 allows remote attackers to bypass the Same Origin Policy, and modify the rendering of text from arbitrary web sites, via a Java applet that loads fonts.
Products: apple safari, apple webkit