CVE-2016-4618

🗓️ 25 Sep 2016 10:01:59Reported by appleType

CVE-2016-4618 Cross-site scripting (XSS) vulnerability in Safari Reader in Apple iOS before 10 and Safari before 10 allows remote attackers to inject arbitrary web script or HTML via a crafted web site, aka "Universal XSS (UXSS).

Reporter	Title	Published	Views	Family All 12
Prion	Cross site scripting	25 Sep 201610:59	–	prion
Cvelist	CVE-2016-4618	25 Sep 201610:00	–	cvelist
NVD	CVE-2016-4618	25 Sep 201610:59	–	nvd
ThreatPost	Apple Squashes 68 Security Bugs With Sierra Release	20 Sep 201617:14	–	threatpost
Tenable Nessus	Safari < 10 Multiple Vulnerabilities	21 Oct 201600:00	–	nessus
Tenable Nessus	Mac OS X : Apple Safari < 10.0 Multiple Vulnerabilities	26 Sep 201600:00	–	nessus
Tenable Nessus	Apple iOS < 10.0 Multiple Vulnerabilities	3 Oct 201600:00	–	nessus
OpenVAS	Apple Safari Multiple Vulnerabilities (Sep 2016) - Mac OS X	28 Sep 201600:00	–	openvas
Apple	About the security content of Safari 10	20 Sep 201600:00	–	apple
Apple	About the security content of Safari 10 - Apple Support	23 Jan 201705:36	–	apple

Nvd

Node

apple safariMatch9.1.3

apple iphone_osRange≤9.3.5

Source	Link
securitytracker	www.securitytracker.com/id/1036854
support	www.support.apple.com/HT207157
support	www.support.apple.com/HT207143
lists	www.lists.apple.com/archives/security-announce/2016/Sep/msg00008.html
lists	www.lists.apple.com/archives/security-announce/2016/Sep/msg00007.html
securityfocus	www.securityfocus.com/bid/93053

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

25 Sep 2016 10:59Current

5.8Medium risk

Vulners AI Score5.8

CVSS24.3

CVSS36.1

EPSS0.004

CWE-79