CVE Vulnerabilities

CVE-2016-1781

Published: Mar 24, 2016 | Modified: May 06, 2026
CVSS 3.x
4.3
MEDIUM
Source:
NVD
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
CVSS 2.x
4.3 MEDIUM
AV:N/AC:M/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM
root.io logo minimus.io logo echo.ai logo

WebKit in Apple iOS before 9.3 and Safari before 9.1 mishandles attachment URLs, which makes it easier for remote web servers to track users via unspecified vectors.

Affected Software

NameVendorStart VersionEnd Version
SafariApple*9.0.3 (including)
Iphone_osApple*9.2.1 (including)
Qtwebkit-opensource-srcUbuntudevel*
Qtwebkit-opensource-srcUbuntuesm-infra-legacy/xenial*
Qtwebkit-opensource-srcUbuntuesm-infra/xenial*
Qtwebkit-opensource-srcUbuntutrusty*
Qtwebkit-opensource-srcUbuntuwily*
Qtwebkit-opensource-srcUbuntuxenial*
Qtwebkit-opensource-srcUbuntuyakkety*
Qtwebkit-sourceUbuntudevel*
Qtwebkit-sourceUbuntuesm-apps-legacy/xenial*
Qtwebkit-sourceUbuntuesm-apps/xenial*
Qtwebkit-sourceUbuntuprecise*
Qtwebkit-sourceUbuntutrusty*
Qtwebkit-sourceUbuntuwily*
Qtwebkit-sourceUbuntuxenial*
Qtwebkit-sourceUbuntuyakkety*
WebkitUbuntuprecise*
Webkit2gtkUbuntuupstream*
Webkit2gtkUbuntuwily*
WebkitgtkUbuntudevel*
WebkitgtkUbuntuesm-apps-legacy/xenial*
WebkitgtkUbuntuesm-apps/xenial*
WebkitgtkUbuntutrusty*
WebkitgtkUbuntuwily*
WebkitgtkUbuntuxenial*
WebkitgtkUbuntuyakkety*

References