CVE-2016-1772

4.3 MEDIUM

Published: March 24, 2016 Modified: May 06, 2026

Description

The Top Sites feature in Apple Safari before 9.1 mishandles cookie storage, which makes it easier for remote web servers to track users via unspecified vectors.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

CVSS v3.x Details

0.0 Low Medium High Critical 10.0

Vector String

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://lists.apple.com/archives/security-announce/2016/Mar/msg00005.html

Source: product-security@apple.com

Vendor Advisory

http://www.securityfocus.com/bid/85055

Source: product-security@apple.com

http://www.securitytracker.com/id/1035354

Source: product-security@apple.com

https://support.apple.com/HT206171

Source: product-security@apple.com

Vendor Advisory

http://lists.apple.com/archives/security-announce/2016/Mar/msg00005.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/bid/85055

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id/1035354

Source: af854a3a-2127-422b-91ae-364da2661108

https://support.apple.com/HT206171

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

8 reference(s) from NVD

Quick Stats

CVSS v3 Score

4.3 / 10.0

EPSS (Exploit Probability)

0.3%

53th percentile

Exploitation Status

Not in CISA KEV

Weaknesses (CWE)

CWE-200

Affected Vendors

apple

Related CVEs