CVE-2016-1780
MEDIUMWebKit <9.3 - Info Disclosure
Title source: llmDescription
WebKit in Apple iOS before 9.3 does not prevent hidden web views from reading orientation and motion data, which allows remote attackers to obtain sensitive information about a device's physical environment via a crafted web site.
Scores
CVSS v3
4.3
EPSS
0.0027
EPSS Percentile
49.8%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Classification
CWE
CWE-200
Status
draft
Affected Products (1)
apple/iphone_os
< 9.2.1
Timeline
Published
Mar 24, 2016
Tracked Since
Feb 18, 2026