CVE-2016-4591

High

Published: 22/07/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 mishandles the location variable, allowing remote attackers to access the local filesystem via unspecified vectors.

Risk Assessment

Attackers may gain access to sensitive data on the local filesystem, posing a serious threat to user data security.

Recommendation

It is recommended to update systems to the latest versions to mitigate the risks associated with this vulnerability.

Other vulnerabilities in WebKit, Apple iOS, Safari, tvOS

CVE-2016-4624High
WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.

Original NVD description (English source)

WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 mishandles the location variable, which allows remote attackers to access the local filesystem via unspecified vectors.