CVE-2016-1858: Infoleak
WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, improperly tracks taint attributes, which allows remote attackers to obtain sensitive information via a crafted web site.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-1858?
CVE-2016-1858 is considered a medium severity vulnerability due to its potential to expose sensitive information.
How do I fix CVE-2016-1858?
To fix CVE-2016-1858, update your affected Apple devices to the latest versions of iOS, Safari, or tvOS.
Which versions are affected by CVE-2016-1858?
CVE-2016-1858 affects Apple iOS versions before 9.3.2, Safari versions before 9.1.1, and tvOS versions before 9.2.1.
What does CVE-2016-1858 exploit?
CVE-2016-1858 exploits improper tracking of taint attributes in WebKit, which can lead to information disclosure.
Who can be targeted by CVE-2016-1858?
Remote attackers can target users of affected Apple products via a crafted website to exploit CVE-2016-1858.