CVE-2014-4460

No fix known EPSS <1%

CFNetwork in Apple iOS before 8.1.1 and OS X before 10.10.1 does not properly clear the browsing cache upon a transition out of private-browsing mode, which makes it easier for physically proximate attackers to obtain sensitive information by reading cache files.

Published 2014-11-18 · CVE record · OSV

Products: apple iphone_os, apple mac_os_x