CVE-2016-1857

WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-1854, CVE-2016-1855, and CVE-2016-1856.

Affected products

Alt Linux, Safari, Ubuntu, Webkit, Ios

Apple Safari

< 9.1.1

Apple Iphone Os

< 9.3.2

Apple Tvos

< 9.2.1

CVSS 3.0

8.8 HIGH

EPSS

2.9% (86th percentile)

Weakness

CWE-119

NVD status

Modified

Published

2016-05-20

No exploit for CVE-2016-1857 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.