CVE-2016-1858 in Safari

Summary

WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, improperly tracks taint attributes, which allows remote attackers to obtain sensitive information via a crafted web site.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Reservation: 01/13/2016
• Disclosure: 05/20/2016
• Moderation: VulDB entry created
• Entries: 2
• CPE: ready
• CWE: CWE-200 (Confirmed)
• CVSS: 7.7
• EPSS: 0.01328
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-1858
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-1858
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-1858/