Security Advisory
CVE-2015-5860
5
Vulnerability Description
The CFNetwork HTTPProtocol component in Apple iOS before 9 mishandles HSTS state, which allows remote attackers to bypass the Safari private-browsing protection mechanism and track users via a crafted web site.
Published Date
September 18, 2015
Official Source
NIST NVD Advisory