VulnerabilityModified
CVE-2015-1084
The user interface in WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, does not display URLs consistently, which makes it easier for remote attackers to conduct phishing attacks via a crafted URL.
MEDIUM 5.0EPSS 1.93%
Does this matter?
Lower severity and a low EPSS score (1.93%). Track it; it rarely justifies an emergency change on its own.
Description
The user interface in WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, does not display URLs consistently, which makes it easier for remote attackers to conduct phishing attacks via a crafted URL.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N
- EPSS
- 1.93% probability · 79th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-17
- Affected
- apple/iphone os · apple/safari
- Source
- product-security@apple.com
References
- http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.htmlVendor Advisory
- http://lists.apple.com/archives/security-announce/2015/Mar/msg00004.htmlVendor Advisory
- http://www.securitytracker.com/id/1031936
- https://support.apple.com/HT204560Vendor Advisory
- https://support.apple.com/HT204661Vendor Advisory
- http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.htmlVendor Advisory
- http://lists.apple.com/archives/security-announce/2015/Mar/msg00004.htmlVendor Advisory
- http://www.securitytracker.com/id/1031936
- https://support.apple.com/HT204560Vendor Advisory
- https://support.apple.com/HT204661Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.