CVE-2016-4707

Description

CFNetwork in Apple iOS before 10 and OS X before 10.12 mishandles Local Storage deletion, which allows local users to discover the visited web sites of arbitrary users via unspecified vectors.

Risk Information

Base Score

4.0

MODERATE

Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS Score

Exploitation Probability

0.059

Associated Vulnerability

Vulnerability	OS Platform
JavaScript engine library from WebKitGTK+ - GObject introspection (USN-3166-1) libwebkit2gtk-4.0-37_2.14.2-0ubuntu0.16.04.1_amd64.deb	Linux
JavaScript engine library from WebKitGTK+ - GObject introspection (USN-3166-1) libjavascriptcoregtk-4.0-18_2.14.2-0ubuntu0.16.04.1_i386.deb	Linux
JavaScript engine library from WebKitGTK+ - GObject introspection (USN-3166-1) libjavascriptcoregtk-4.0-18_2.14.2-0ubuntu0.16.04.1_amd64.deb	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234