Not rated
CVE-2016-4676 A Cross-origin vulnerability exists in WebKit in Apple Safari before 10.0.1 when processing location attributes, which…
Description
A Cross-origin vulnerability exists in WebKit in Apple Safari before 10.0.1 when processing location attributes, which could let a remote malicious user obtain sensitive information.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Safari | Versions not published |
References
- www.securityfocus.com www.securityfocus.com
- seclists.org seclists.org
- www.securitytracker.com www.securitytracker.com
- packetstormsecurity.com packetstormsecurity.com
- lists.apple.com lists.apple.com
Timeline
- Published
- Last modified
Other CVEs of Safari
The 520 CVEs of Safari →
CVE-2026-113904
A use-after-free issue was addressed with improved memory management
4.3
Medium
CVE-2026-113949
A type confusion issue was addressed with improved state management
8.8
High
CVE-2026-112621
An out-of-bounds write issue was addressed with improved bounds checking
7.5
High
CVE-2026-112699
An out-of-bounds read was addressed with improved bounds checking
6.5
Medium