CVE-2016-1864
MEDIUMWebKit - XSS
Title source: llmDescription
The XSS auditor in WebKit, as used in Apple iOS before 9.3 and Safari before 9.1, does not properly handle redirects in block mode, which allows remote attackers to obtain sensitive information via a crafted URL.
References (6)
Scores
CVSS v3
4.3
EPSS
0.0055
EPSS Percentile
67.6%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Classification
CWE
CWE-200
Status
draft
Affected Products (2)
apple/safari
< 9.0.3
apple/iphone_os
< 9.2.1
Timeline
Published
Jun 19, 2016
Tracked Since
Feb 18, 2026