vulnerability

Apple Safari security update for CVE-2016-1785

Severity
4
CVSS
(AV:N/AC:M/Au:N/C:P/I:N/A:N)
Published
Mar 23, 2016
Added
Dec 5, 2016
Modified
Mar 27, 2026

Description

The Page Loading implementation in WebKit in Apple iOS before 9.3 and Safari before 9.1 mishandles character encoding during access to cached data, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site.

Solutions

apple-safari-upgrade-9_1apple-safari-windows-uninstall
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.