Security Advisory

CVE-2015-5859

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2015-11-22 02:00:00

Last updated 2024-08-06 07:06:33

Assigner apple

State PUBLISHED

Description

The CFNetwork HTTPProtocol component in Apple iOS before 9 and OS X before 10.11 does not properly recognize the HSTS preload list during a Safari private-browsing session, which makes it easier for remote attackers to obtain sensitive information by sniffing the network.

← Browse all CVEs View on cve.org ↗