CVE-2016-4603: Apple iPhone OS

Medium severity, CVSS 4.3. EPSS: 1.2% chance of exploitation in the next 30 days.

Web Media in Apple iOS before 9.3.3 allows attackers to bypass the Private Browsing protection mechanism and obtain sensitive video URL information by leveraging Safari View Controller misbehavior.

Affected products

• Apple iPhone OS: up to and including 9.3.2

Published 2016-07-22. Last modified 2026-06-17.