The CFNetwork Proxies subsystem in Apple iOS before 9.3.2, OS X before 10.11.5, and tvOS before 9.2.1 mishandles URLs in http and https requests, which allows remote attackers to obtain sensitive information via unspecified vectors.
| Software | From | Fixed in |
|---|---|---|
| apple / mac_os_x | - | 10.11.5 |
| apple / iphone_os | - | 9.3.2 |
| apple / tvos | - | 9.2.1 |