CVE-2016-4707

Published: Sep 25, 2016Modified: May 6, 2026

4.0

Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 2.5 / Impact: 1.4

Source: NVD

Description

CFNetwork in Apple iOS before 10 and OS X before 10.12 mishandles Local Storage deletion, which allows local users to discover the visited web sites of arbitrary users via unspecified vectors.

Affected (2)

Products: Apple: Iphone Os, Mac Os X

Apple

2 products

Iphone Os

Mac Os X

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Apple Iphone Os	Up to 9.3.5
Apple Mac Os X	Up to 10.11.6

Related CWEs

CWE-19

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (12)

http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html

Source: product-security@apple.com

Mailing List

http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html

Source: product-security@apple.com

Mailing List

http://www.securityfocus.com/bid/93056

Source: product-security@apple.com

http://www.securitytracker.com/id/1036858

Source: product-security@apple.com

https://support.apple.com/HT207143

Source: product-security@apple.com

Vendor Advisory

https://support.apple.com/HT207170

Source: product-security@apple.com

Vendor Advisory

http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html