CVE-2016-1772

MEDIUM

Apple Safari <9.1 - Info Disclosure

Title source: llm

Description

The Top Sites feature in Apple Safari before 9.1 mishandles cookie storage, which makes it easier for remote web servers to track users via unspecified vectors.

Scores

CVSS v3 4.3
EPSS 0.0030
EPSS Percentile 53.0%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Classification

CWE
CWE-200
Status draft

Affected Products (1)

apple/safari < 9.0.3

Timeline

Published Mar 24, 2016
Tracked Since Feb 18, 2026