CVE-2016-1728

—

CVSS 3.0

4.3 medium

EPSS

2%p76

Published

Feb 1, 2016 (Feb 1, 2016)

Modified

Jun 17, 2026

Description

The Cascading Style Sheets (CSS) implementation in Apple iOS before 9.2.1 and Safari before 9.0.3 mishandles the "a:visited button" selector during height processing, which makes it easier for remote attackers to obtain sensitive browser-history information via a crafted web site.

Vendors: apple
Products: safari, iphone os
Weakness: CWE-200
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.7%)

In the news0 stories

No ingested article mentions this CVE yet.