CVE-2009-2195

CVE-2009-2195 describes a critical buffer overflow vulnerability in Apple WebKit, affecting Safari browsers on macOS and Windows, as well as other applications utilizing WebKit. This flaw allows remote attackers to execute arbitrary code or trigger a denial of service by crafting malicious floating-point numbers. With a CVSS score of 9.3 (critical) and an FAUCET Risk Score of 97/100, it poses a significant threat due to its network-based attack vector and high impact on confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, exploit code is publicly available via ExploitDB, indicating a potential for exploitation, though there is no evidence of active widespread exploitation or significant community discussion.