Description
CFNetwork in Apple iOS before 10 and OS X before 10.12 mishandles Local Storage deletion, which allows local users to discover the visited web sites of arbitrary users via unspecified vectors.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 16.04 LTS | webkit2gtk | 2.14.2-0ubuntu0.16.04.1 | USN-3166-1 |
| Ubuntu 16.04 LTS | webkitgtk +2 | No fix yet | — |
Advisories 1
- USN-3166-1 webkit2gtk vulnerabilities Ubuntu Security Notices (USN) · Apr 22, 2026
References
- 1036858 vdb-entry
- APPLE-SA-2016-09-20 vendor-advisory
- APPLE-SA-2016-09-20-3 vendor-advisory
- 93056 vdb-entry
- https://support.apple.com/HT207170
- https://support.apple.com/HT207143