CVE-2016-4604

—

CVSS 3.0

5.4 medium

EPSS

1%p67

Published

Jul 22, 2016 (Jul 22, 2016)

Modified

Jun 17, 2026

Description

Safari in Apple iOS before 9.3.3 allows remote attackers to spoof the displayed URL via an HTTP response specifying redirection to an invalid TCP port number.

Vendors: apple
Products: safari
Weakness: CWE-601
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (1.2%)

In the news0 stories

No ingested article mentions this CVE yet.