CVE-2016-4758 PUBLISHED

WebKit in Apple iOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 does not properly restrict access to the location variable, which allows remote attackers to obtain sensitive information via a crafted web site.

EPSS 0.92% · 75.8th percentile

Risk Scores

EPSS Score
0.92%
75.8th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSwebkitgtk2.4.10-0ubuntu1, 2.4.9-2ubuntu2, 0
Ubuntu:16.04:LTSqtwebkit-source2.3.2-0ubuntu11, 0, 2.3.2-0ubuntu10
Ubuntu:16.04:LTSqtwebkit-opensource-src0, 5.5.1+dfsg-2ubuntu1, 5.4.2+dfsg-1ubuntu2.1

Timeline

References

Open in Interactive Console →