CVE-2016-6231

CVE Database · CVE-2016-6231

CVE-2016-6231

· N/AModified

CVSS v3.1

N/A

EPSS

1.28%

Published

Aug 25, 2016

Modified

May 6, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Kaspersky Safe Browser iOS before 1.7.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to obtain sensitive information via a crafted certificate.

Weaknesses (CWE)

CWE-200

Affected Products (1)

kaspersky · safe_browservulnerable

References (10)

http://seclists.org/fulldisclosure/2016/Aug/30

Third Party AdvisoryVDB Entry

http://www.info-sec.ca/advisories/Kaspersky-Safe-Browser.html

Third Party Advisory

http://www.securityfocus.com/archive/1/539071/100/0/threaded

http://www.securityfocus.com/bid/92200

https://support.kaspersky.com/vulnerability.aspx?el=12430#280716

Third Party Advisory

http://seclists.org/fulldisclosure/2016/Aug/30

Third Party AdvisoryVDB Entry

http://www.info-sec.ca/advisories/Kaspersky-Safe-Browser.html

Third Party Advisory

KEV Catalog EPSS Scores Vendors All CVEs