CVE

Id
91582  
CVE No.
CVE-2016-4763  
Status
Candidate  
Description
WKWebView in WebKit in Apple iOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 does not properly verify X.509 certificates from HTTPS servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.  
Phase
Assigned (20160511)  
Votes
None (candidate not yet proposed)  
Comments