Information disclosure in Apple Inc. products - CVE-2016-4758

Vulnerability identifier: #VU597

CSH Severity: Low

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2016-4758

CWE-ID: CWE-284

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote user to obtain potentially sensitive information on the target system.
The weakness exists due to permissions flaw in the variable location handling and leads to sensivitive information disclosure.
Successful exploitation of the vulnerability results in access to potentially sensitive data.

Apple iOS
Apple Safari
iTunes

Update to 10.0

• https://support.apple.com/en-us/HT207157
• https://support.apple.com/en-us/HT207158
• https://support.apple.com/cs-cz/HT207143

• Information disclosure in Apple Safari