https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T19:56:20.860768+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2016-1864 CVE-2016-1864 2026-09-29T19:56:20.878209+00:00

The XSS auditor in WebKit, as used in Apple iOS before 9.3 and Safari before 9.1, does not properly handle redirects in block mode, which allows remote attackers to obtain sensitive information via a crafted URL.