← back | CVE Intelligence

CVE-2016-1764

Curated 2 security research writeups, vulnerability advisories and exploitation analyses for CVE-2016-1764.

Coverage Span: 2016-04-08
Reports: 2 related reports

Associated Reports & Timeline

OS X Messages (iMessage): XSS & File Disclosure

Official advisory for the OS X Messages (iMessage) XSS and file disclosure issue (CVE-2016-1764): a clicked JavaScript URI could leak chat history; fixed on March 21, 2016.

If You Can't Break Crypto, Break the Client: Recovery of Plaintext iMessage Data

Technical write-up of CVE-2016-1764: a JavaScript URI plus the missing same-origin policy in OS X Messages' embedded WebKit let attackers exfiltrate entire iMessage histories with one click.