CVE-2016-1781
WebKit in Apple iOS before 9.3 and Safari before 9.1 mishandles attachment URLs, which makes it easier for remote web servers to track users via unspecified vectors.
- Score
- CVSS 3.0 4.3 Medium
- Status
- Modified - product-security@apple.com
- Published
- 2016-03-24
- Last modified
- 2024-08-05
- Weaknesses
- CWE-19
Affected products
References
- http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html
- http://lists.apple.com/archives/security-announce/2015/Dec/msg00003.html
- http://www.securityfocus.com/archive/1/537948/100/0/threaded
- http://www.securitytracker.com/id/1035353
- https://support.apple.com/HT205635
- https://support.apple.com/HT205639
