---
id: 4259
title: "[CVE-2016-1764] OS X Messages (iMessage): XSS & File Disclosure"
cve: CVE-2016-1764
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/os-x-messages-imessage-xss-advisory"
published_at: "2016-04-08T00:00:00Z"
tags: ["macos", "advisory", "apple", "imessage", "cve-2016-1764"]
phying_url: "https://phying.com/item/4259"
lang: en
---

# [CVE-2016-1764] OS X Messages (iMessage): XSS & File Disclosure

## Summary

Official advisory for the OS X Messages (iMessage) XSS and file disclosure issue (CVE-2016-1764): a clicked JavaScript URI could leak chat history; fixed on March 21, 2016.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **CVE:** CVE-2016-1764
- **Published:** 2016-04-08T00:00:00Z
- **Original:** https://bishopfox.com/blog/os-x-messages-imessage-xss-advisory
- **Phying News:** https://phying.com/item/4259