CVE-2016-4591
Fixed in a distro release EPSS 4%
WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 mishandles the location variable, which allows remote attackers to access the local filesystem via unspecified vectors.
Products: apple webkit
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | webkit2gtk | 2.12.4-1 |
| Debian 13 | webkit2gtk | 2.12.4-1 |
| Debian 14 | webkit2gtk | 2.12.4-1 |
| Ubuntu 16.04 LTS | qtwebkit-opensource-src | no fix |
| Ubuntu 16.04 LTS | qtwebkit-source | no fix |
| Ubuntu 16.04 LTS | webkit2gtk | 2.12.5-0ubuntu0.16.04.1 |
| Ubuntu 16.04 LTS | webkitgtk | no fix |
| openSUSE Tumbleweed | gtk3 | 2.14.2-2.1 |