CVE-2016-1801
published 2016-05-20CVE-2016-1801: The CFNetwork Proxies subsystem in Apple iOS before 9.3.2, OS X before 10.11.5, and tvOS before 9.2.1 mishandles URLs in http and https requests, which allows…
PriorityP342high7.5CVSS 3.0
AVNACLPRNUINSUCHINAN
EPSS
3.72%
88.6th percentile
The CFNetwork Proxies subsystem in Apple iOS before 9.3.2, OS X before 10.11.5, and tvOS before 9.2.1 mishandles URLs in http and https requests, which allows remote attackers to obtain sensitive information via unspecified vectors.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | ios | — | — |
| apple | iphone_os | < 9.3.2 | 9.3.2 |
| apple | mac_os_x | < 10.11.5 | 10.11.5 |
| apple | os_x_el_capitan_v10.11.5_and_security_update_2016-003 | — | — |
| apple | tvos | < 9.2.1 | 9.2.1 |
| apple | tvos | — | — |
CVSS provenance
nvdv3.07.5HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Apple
CVE-2016-1801: iOS 9.3.2
vendor_apple·CVSS 7.5
CVE-2016-1801 [HIGH] CVE-2016-1801: iOS 9.3.2
Apple Security Update: About the security content of iOS 9.3.2
Product: iOS
Version: 9.3.2
CVE: CVE-2016-1801
Component: CVE-ID
Apple
CVE-2016-1801: tvOS 9.2.1
vendor_apple·CVSS 7.5
CVE-2016-1801 [HIGH] CVE-2016-1801: tvOS 9.2.1
Apple Security Update: About the security content of tvOS 9.2.1
Product: tvOS
Version: 9.2.1
CVE: CVE-2016-1801
Component: CVE-ID
Apple
CVE-2016-1801: OS X El Capitan v10.11.5 and Security Update 2016-003
vendor_apple·CVSS 7.5
CVE-2016-1801 [HIGH] CVE-2016-1801: OS X El Capitan v10.11.5 and Security Update 2016-003
Apple Security Update: About the security content of OS X El Capitan v10.11.5 and Security Update 2016-003
Product: OS X El Capitan v10.11.5 and Security Update 2016-003
CVE: CVE-2016-1801
Component: CVE-ID
GHSA
GHSA-wc4r-2r4r-4q4j: The CFNetwork Proxies subsystem in Apple iOS before 9
ghsa_unreviewed·2022-05-14
CVE-2016-1801 [HIGH] CWE-200 GHSA-wc4r-2r4r-4q4j: The CFNetwork Proxies subsystem in Apple iOS before 9
The CFNetwork Proxies subsystem in Apple iOS before 9.3.2, OS X before 10.11.5, and tvOS before 9.2.1 mishandles URLs in http and https requests, which allows remote attackers to obtain sensitive information via unspecified vectors.
No detection rules found.
No public exploits indexed.
http://lists.apple.com/archives/security-announce/2016/May/msg00001.htmlhttp://lists.apple.com/archives/security-announce/2016/May/msg00002.htmlhttp://lists.apple.com/archives/security-announce/2016/May/msg00004.htmlhttp://www.securityfocus.com/bid/90697http://www.securitytracker.com/id/1035890https://support.apple.com/HT206564https://support.apple.com/HT206567https://support.apple.com/HT206568https://www.kb.cert.org/vuls/id/877625http://lists.apple.com/archives/security-announce/2016/May/msg00001.htmlhttp://lists.apple.com/archives/security-announce/2016/May/msg00002.htmlhttp://lists.apple.com/archives/security-announce/2016/May/msg00004.htmlhttp://www.securityfocus.com/bid/90697http://www.securitytracker.com/id/1035890https://support.apple.com/HT206564https://support.apple.com/HT206567https://support.apple.com/HT206568https://www.kb.cert.org/vuls/id/877625
2016-05-20
Published