CVE-2016-1781

N/A

Description

WebKit in Apple iOS before 9.3 and Safari before 9.1 mishandles attachment URLs, which makes it easier for remote web servers to track users via unspecified vectors.

CVE Details

CVSS v3.1 ScoreN/A

Published3/24/2016

Last Modified5/6/2026

Sourcenvd

Honeypot Sightings0

Affected Products

apple:iphone_osapple:safari

Weaknesses (CWE)

CWE-19

References

http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html(product-security@apple.com)

http://lists.apple.com/archives/security-announce/2015/Dec/msg00003.html(product-security@apple.com)

http://www.securityfocus.com/archive/1/537948/100/0/threaded(product-security@apple.com)

http://www.securitytracker.com/id/1035353(product-security@apple.com)

https://support.apple.com/HT205635(product-security@apple.com)

https://support.apple.com/HT205639(product-security@apple.com)

http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.apple.com/archives/security-announce/2015/Dec/msg00003.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/archive/1/537948/100/0/threaded(af854a3a-2127-422b-91ae-364da2661108)

http://www.securitytracker.com/id/1035353(af854a3a-2127-422b-91ae-364da2661108)

https://support.apple.com/HT205635(af854a3a-2127-422b-91ae-364da2661108)

https://support.apple.com/HT205639(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.