4.3med
CVE-2016-4603
Web Media in Apple iOS before 9.3.3 allows attackers to bypass the Private Browsing protection mechanism and obtain sensitive video URL inf…
Published 10 y ago · modified 4 mo ago · JSON
CVSS
4.3
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
1.2%
percentile 68%
Public exploits
0
none known
Summary
Web Media in Apple iOS before 9.3.3 allows attackers to bypass the Private Browsing protection mechanism and obtain sensitive video URL information by leveraging Safari View Controller misbehavior.
Exploit prediction (EPSS)
1.20% probability of exploitation in the next 30 days, higher than 68% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.0 | 4.3 | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N |
| NVD | 2.0 | 4.3 | AV:N/AC:M/Au:N/C:P/I:N/A:N |
Classification
- Weakness
- CWE-254 7PK - Security Features
References
- securitytracker.com /id/1036344 · vdb-entry, x_refsource_SECTRACK, x_transferred
- lists.apple.com /archives/security-announce/2016/Jul/msg00001.html · vendor-advisory, x_refsource_APPLE, x_transferred
- securityfocus.com /bid/91825 · vdb-entry, x_refsource_BID, x_transferred
- support.apple.com /HT206902 · x_refsource_CONFIRM, x_transferred
Sources
- CVE List: CVE-2016-4603
- NVD: CVE-2016-4603
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.