CVE-2016-4763

—

CVSS 3.0

6.8 medium

EPSS

1%p66

Published

Sep 25, 2016 (Sep 25, 2016)

Modified

Jun 17, 2026

Description

WKWebView in WebKit in Apple iOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 does not properly verify X.509 certificates from HTTPS servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

Vendors: apple
Products: itunes, safari, iphone os
Weakness: CWE-310
Vector: CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (1.2%)

In the news0 stories

No ingested article mentions this CVE yet.