CVE-2016-6231

Kaspersky Safe Browser iOS before 1.7.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to obtain sensitive information via a crafted certificate.

• CWE-200

• http://seclists.org/fulldisclosure/2016/Aug/30Third Party Advisory, VDB Entry
• http://www.info-sec.ca/advisories/Kaspersky-Safe-Browser.htmlThird Party Advisory
• http://www.securityfocus.com/archive/1/539071/100/0/threaded
• http://www.securityfocus.com/bid/92200
• https://support.kaspersky.com/vulnerability.aspx?el=12430#280716Third Party Advisory
• http://seclists.org/fulldisclosure/2016/Aug/30Third Party Advisory, VDB Entry
• http://www.info-sec.ca/advisories/Kaspersky-Safe-Browser.htmlThird Party Advisory
• http://www.securityfocus.com/archive/1/539071/100/0/threaded
• http://www.securityfocus.com/bid/92200
• https://support.kaspersky.com/vulnerability.aspx?el=12430#280716Third Party Advisory

Published

Aug 25, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-6214gd_tga.c in the GD Graphics Library (aka libgd) before 2.2.3…
• CVE-2016-6217Cross-site scripting (XSS) vulnerability in Sophos PureMessa…
• CVE-2016-6220Information Disclosure vulnerability in the Dashboard and Er…7.5
• CVE-2016-6223The TIFFReadRawStrip1 and TIFFReadRawTile1 functions in tif_…
• CVE-2016-6224ecryptfs-setup-swap in eCryptfs does not prevent the unencry…
• CVE-2016-6225xbcrypt in Percona XtraBackup before 2.3.6 and 2.4.x before …
• CVE-2016-6232Directory traversal vulnerability in KArchive before 5.24, a…
• CVE-2016-6233The (1) order and (2) group methods in Zend_Db_Select in the…
• CVE-2016-6234The process_file function in lepton/jpgcoder.cc in Dropbox l…
• CVE-2016-6235The setup_imginfo_jpg function in lepton/jpgcoder.cc in Drop…
• CVE-2016-6236The setup_imginfo_jpg function in lepton/jpgcoder.cc in Drop…
• CVE-2016-6237The build_huffcodes function in lepton/jpgcoder.cc in Dropbo…