high7.5
CVE-2016-4676
A Cross-origin vulnerability exists in WebKit in Apple Safari before 10.0.1 when processing location attributes, which could let a remote malicious user obtain…
Impact
A Cross-origin vulnerability exists in WebKit in Apple Safari before 10.0.1 when processing location attributes, which could let a remote malicious user obtain sensitive information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Safari | before 10.0.1 |
| Apple | Mac Os X | Versions 10.10.5, 10.11.6, 10.12 |
Weakness classification
References
- NVD record
- CVE.org record
- http://seclists.org/fulldisclosure/2016/Oct/89
- http://www.securityfocus.com/bid/93851
- http://www.securitytracker.com/id/1037087
- https://lists.apple.com/archives/security-announce/2016/Oct/msg00002.html
- https://packetstormsecurity.com/files/cve/CVE-2016-4676
- http://seclists.org/fulldisclosure/2016/Oct/89
- http://www.securityfocus.com/bid/93851
- http://www.securitytracker.com/id/1037087
- https://lists.apple.com/archives/security-announce/2016/Oct/msg00002.html
- https://packetstormsecurity.com/files/cve/CVE-2016-4676