vulnwire
4.3med

CVE-2016-1864

The XSS auditor in WebKit, as used in Apple iOS before 9.3 and Safari before 9.1, does not properly handle redirects in block mode, which a…

Published 10 y ago · modified 4 mo ago · JSON

CVSS
4.3
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
1.9%
percentile 79%
Public exploits
0
none known

The XSS auditor in WebKit, as used in Apple iOS before 9.3 and Safari before 9.1, does not properly handle redirects in block mode, which allows remote attackers to obtain sensitive information via a crafted URL.

Exploit prediction (EPSS)

1.86% probability of exploitation in the next 30 days, higher than 79% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD3.04.3CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
NVD2.05.0AV:N/AC:L/Au:N/C:P/I:N/A:N

Classification

Weakness
  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

References

  • securitytracker.com /id/1036344 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • lists.apple.com /archives/security-announce/2016/Mar/msg00005.html · vendor-advisory, x_refsource_APPLE, x_transferred
  • lists.apple.com /archives/security-announce/2016/Mar/msg00000.html · vendor-advisory, x_refsource_APPLE, x_transferred
  • support.apple.com /HT206171 · x_refsource_CONFIRM, x_transferred
  • securityfocus.com /bid/91358 · vdb-entry, x_refsource_BID, x_transferred
  • support.apple.com /HT206166 · x_refsource_CONFIRM, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.