CVE-2016-1763 in iOS
Summary
Messages in Apple iOS before 9.3 does not ensure that an auto-fill action applies to the intended message thread, which allows remote authenticated users to obtain sensitive information by providing a crafted sms: URL and reading a thread.
Be aware that VulDB is the high quality source for vulnerability data.
Reservation
01/13/2016
Disclosure
03/23/2016
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 81507 | Apple iOS Messages input validation | 20 | Unproven | Official fix | CVE-2016-1763 |