VulnerabilityModified
CVE-2016-1781
WebKit in Apple iOS before 9.3 and Safari before 9.1 mishandles attachment URLs, which makes it easier for remote web servers to track users via unspecified vectors.
MEDIUM 4.3EPSS 1.29%
Does this matter?
Lower severity and a low EPSS score (1.29%). Track it; it rarely justifies an emergency change on its own.
Description
WebKit in Apple iOS before 9.3 and Safari before 9.1 mishandles attachment URLs, which makes it easier for remote web servers to track users via unspecified vectors.
- CVSS 3.0
- 4.3 MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
- EPSS
- 1.29% probability · 68th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-19
- Affected
- apple/safari · apple/iphone os
- Source
- product-security@apple.com
References
- http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.htmlVendor Advisory
- http://lists.apple.com/archives/security-announce/2015/Dec/msg00003.htmlVendor Advisory
- http://www.securityfocus.com/archive/1/537948/100/0/threaded
- http://www.securitytracker.com/id/1035353
- https://support.apple.com/HT205635Vendor Advisory
- https://support.apple.com/HT205639Vendor Advisory
- http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.htmlVendor Advisory
- http://lists.apple.com/archives/security-announce/2015/Dec/msg00003.htmlVendor Advisory
- http://www.securityfocus.com/archive/1/537948/100/0/threaded
- http://www.securitytracker.com/id/1035353
- https://support.apple.com/HT205635Vendor Advisory
- https://support.apple.com/HT205639Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.