CVE-2016-1728

The Cascading Style Sheets (CSS) implementation in Apple iOS before 9.2.1 and Safari before 9.0.3 mishandles the "a:visited button" selector during height processing, which makes it easier for remote attackers to obtain sensitive browser-history information via a crafted web site.
Severity
MEDIUM
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Atk. Vector
NETWORK
Atk. Complexity
LOW
Priv. Required
NONE
Base Score
CVSS 3.x
EPSS Score
Percentile: 80%
VendorProductVersion
applesafari
𝑥
≤ 9.0.2
appleiphone_os
𝑥
≤ 9.2
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
qtwebkit-opensource-src
yakkety
ignored
xenial
ignored
wily
ignored
trusty
dne
precise
dne
qtwebkit-source
yakkety
ignored
xenial
ignored
wily
ignored
trusty
dne
precise
ignored
webkit
yakkety
dne
xenial
dne
wily
dne
trusty
dne
precise
ignored
webkit2gtk
yakkety
not-affected
xenial
not-affected
wily
ignored
trusty
dne
precise
dne
webkitgtk
yakkety
ignored
xenial
ignored
wily
ignored
trusty
dne
precise
dne