CVE-2015-5788 on Ubuntu 16.04 LTS (xenial) - medium.
Description:
The WebKit Canvas implementation in Apple iOS before 9 allows remote attackers to bypass the Same Origin Policy and obtain sensitive image information via vectors involving a CANVAS element.