Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Devdatta Akhawe

Researcher fromDropbox, Inc.
#51572of 53,630
4.3Total CVSS
Vulnerabilities · 1
PT-2016-1536
4.3
2016-03-24
Apple · Safari · CVE-2016-1772
**Name of the Vulnerable Software and Affected Versions** Apple Safari versions prior to 9.1 **Description** The issue is related to the Top Sites feature in Apple Safari, which mishandles cookie storage. This makes it easier for remote web servers to track users. The vulnerability can be exploited by a remote attacker to track users. **Recommendations** For Apple Safari versions prior to 9.1, update to version 9.1 or later to resolve the issue. As a temporary workaround, consider disabling the Top Sites feature until a patch is available. Restrict access to sensitive information when using affected versions of Safari to minimize the risk of exploitation.