CVE-2016-1849

The "Clear History and Website Data" feature in Apple Safari before 9.1.1, as used in iOS before 9.3.2 and other products, mishandles the deletion of browsing history, which might allow local users to obtain sensitive information by leveraging read access to a Safari directory.

Score

CVSS 3.0 3.3 Low

Status

Modified - product-security@apple.com

Published

2016-05-20

Last modified

2024-08-05

Weaknesses

CWE-200

Affected products

• Iphone Os (Apple)
• Safari (Apple)

References

• http://lists.apple.com/archives/security-announce/2016/May/msg00002.html
• http://lists.apple.com/archives/security-announce/2016/May/msg00005.html
• http://www.securitytracker.com/id/1035888
• https://support.apple.com/HT206565
• https://support.apple.com/HT206568