Releases595
Frequency4 days 22 hours
Last Release
Stars1.94K
DuckDuckGo iOS Application

CVE History

CVEPublishedCVSS v3CVSS v2
7.5 HIGH5 MEDIUM

The DuckDuckGo application through 5.58.0 for Android, and through 7.47.1.0 for iOS, sends hostnames of visited web sites within HTTPS .ico requests to servers in the duckduckgo.com domain, which might make visit data available temporarily at a Potentially Unwanted Endpoint. NOTE: the vendor has stated "the favicon service adheres to our strict privacy policy.