CVE-2015-5860

The CFNetwork HTTPProtocol component in Apple iOS before 9 mishandles HSTS state, which allows remote attackers to bypass the Safari private-browsing…

published September 18, 2015

CVSS
—
EPSS
2%
Percentile
77.7
In the wild
Unconfirmed
What it is

The CFNetwork HTTPProtocol component in Apple iOS before 9 mishandles HSTS state, which allows remote attackers to bypass the Safari private-browsing protection mechanism and track users via a crafted web site.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01764 · 77.7th percentile
Published
2015-09-18T10:00Z
EPSS history
Timeline
  • 18 SEP 10:00Z
    The CFNetwork HTTPProtocol component in Apple iOS before 9 mishandles HSTS state, which allows remote attackers to bypass the Safari private-browsing…
    cvelistv5