CVE-2011-0167 on Ubuntu 16.04 LTS (xenial) - medium.
Description:
The windows functionality in WebKit in Apple Safari before 5.0.4 allows remote attackers to bypass the Same Origin Policy, and force the upload of arbitrary local files from a client computer, via a crafted web site.