CVE-2016-4603
MEDIUMApple Iphone OS < 9.3.2 - Security Feature Bypass
Title source: ruleDescription
Web Media in Apple iOS before 9.3.3 allows attackers to bypass the Private Browsing protection mechanism and obtain sensitive video URL information by leveraging Safari View Controller misbehavior.
References (4)
Scores
CVSS v3
4.3
EPSS
0.0030
EPSS Percentile
53.0%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Classification
CWE
CWE-254
Status
draft
Affected Products (1)
apple/iphone_os
< 9.3.2
Timeline
Published
Jul 22, 2016
Tracked Since
Feb 18, 2026