CVE-2016-4592: apple webkit Uncontrolled Resource Consumption

EPSS trend

Probability

2.23%

Chance of exploitation in the next 30 days

Percentile

82%

Versus all other CVEs

30-day change

0.00 pp

From 2.23% on 18-09-2026

18-09-202618-10-2026

EPSS score

2.23%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

13 links

lists.apple.com/archives/security-announce/2016/Jul/msg00003.htmlVendor AdvisoryX Refsource APPLEMailing ListREPORT
lists.apple.com/archives/security-announce/2016/Jul/msg00001.htmlVendor AdvisoryX Refsource APPLEMailing ListREPORT
www.securityfocus.com/bid/91830VDB EntryX Refsource BIDThird Party Advisory
support.apple.com/HT206900X Refsource CONFIRMVendor AdvisoryREPORT
www.securitytracker.com/id/1036343VDB EntryX Refsource SECTRACKThird Party Advisory
packetstormsecurity.com/files/138502/WebKitGTK-SOP-Bypass-Information-Disclosure.htmlX Refsource MISCThird Party AdvisoryVDB Entry
www.securityfocus.com/archive/1/539295/100/0/threadedMailing ListX Refsource BUGTRAQThird Party AdvisoryVDB Entry
support.apple.com/HT206905X Refsource CONFIRMVendor AdvisoryREPORT
support.apple.com/HT206902X Refsource CONFIRMVendor AdvisoryREPORT
lists.apple.com/archives/security-announce/2016/Jul/msg00004.htmlVendor AdvisoryX Refsource APPLEMailing ListREPORT

Show all 13 references

ubuntu.com/security/CVE-2016-4592REPORT
webkitgtk.org/security/WSA-2016-0005.htmlREPORT
www.cve.org/CVERecord?id=CVE-2016-4592REPORT

Related vulnerabilities

CVE-2018-11713debianwebkit2gtk+61.55%8y ago04-06-2018 14:00WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKitGTK+ prior to version 2.20.0 or without libsoup 2.62.0, unexpectedly failed to use system proxy settings for WebSocket connections. As a result, users could be deanonymized by crafted web sites via a WebSocket connection.CVE-2018-11646debianwebkit2gtk+568.02%8y ago01-06-2018 13:00webkitFaviconDatabaseSetIconForPageURL and webkitFaviconDatabaseSetIconURLForPageURL in UIProcess/API/glib/WebKitFaviconDatabase.cpp in WebKit, as used in WebKitGTK+ through 2.21.3, mishandle an unset pageURL, leading to an application crash.CVE-2018-11712debianwebkit2gtk+51.16%8y ago04-06-2018 14:00WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKitGTK+ versions 2.20.0 and 2.20.1, failed to perform TLS certificate verification for WebSocket connections.CVE-2018-4117appleicloud+163.00%8y ago03-04-2018 06:00An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. watchOS before 4.3 is affected. The issue involves the fetch API in the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site.CVE-2018-4129appleicloud+122.02%8y ago03-04-2018 06:00An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.CVE-2018-4133applesafari+71.49%8y ago03-04-2018 06:00An issue was discovered in certain Apple products. Safari before 11.1 is affected. The issue involves the "WebKit" component. A Safari cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

All vulnerabilities inwebkit webkitgtk

CVE-2016-4592: apple webkit Uncontrolled Resource Consumption

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References