CVE-2016-6231

Severity: medium (CVSS 5.9 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-08-25 · updated 2026-06-17
Weakness: CWE-200

Description

Kaspersky Safe Browser iOS before 1.7.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to obtain sensitive information via a crafted certificate.

Affected products

Kaspersky Safe Browser: through 1.6.0

References

http://seclists.org/fulldisclosure/2016/Aug/30
http://www.info-sec.ca/advisories/Kaspersky-Safe-Browser.html
http://www.securityfocus.com/archive/1/539071/100/0/threaded
http://www.securityfocus.com/bid/92200
https://support.kaspersky.com/vulnerability.aspx?el=12430#280716
http://seclists.org/fulldisclosure/2016/Aug/30
http://www.info-sec.ca/advisories/Kaspersky-Safe-Browser.html
http://www.securityfocus.com/archive/1/539071/100/0/threaded
http://www.securityfocus.com/bid/92200
https://support.kaspersky.com/vulnerability.aspx?el=12430#280716

Get alerted when CVE-2016-6231 or the next vulnerability affects your stack