CVE-2016-4613

medium

Published 2017-02-20 · Modified 2026-05-13

CVSS v3

6.5

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CVSS v2

4.3

VIR risk

6.5

Description

An issue was discovered in certain Apple products. Safari before 10.0.1 is affected. iCloud before 6.0.1 is affected. iTunes before 12.5.2 is affected. tvOS before 10.0.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to obtain sensitive information via a crafted web site.

Predictions

Exploit likelihood

75%

Patch ETA

—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.

Application impact

Vendor	Product	Versions
apple	safari	`{"endIncluding":"10.0.0"}`
apple	icloud	`{"endIncluding":"6.0.0"}`
apple	itunes	`{"endIncluding":"12.5.1"}`

References

http://www.securityfocus.com/bid/93949
http://www.securitytracker.com/id/1037139
https://support.apple.com/HT207270
https://support.apple.com/HT207272
https://support.apple.com/HT207273
https://support.apple.com/HT207274
http://www.securityfocus.com/bid/93949
http://www.securitytracker.com/id/1037139
https://support.apple.com/HT207270
https://support.apple.com/HT207272
https://support.apple.com/HT207273
https://support.apple.com/HT207274

CWEs

CWE-200

Verify integrity in audit chain (admin only). AS-IS.