CVE-2016-4591

—

CVSS 3.0

7.5 high

EPSS

4%p90

Published

Jul 22, 2016 (Jul 22, 2016)

Modified

Jun 17, 2026

Description

WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 mishandles the location variable, which allows remote attackers to access the local filesystem via unspecified vectors.

Vendors: apple
Products: webkit
Weakness: CWE-284
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (4.2%)

In the news0 stories

No ingested article mentions this CVE yet.