VulnerabilityModified
CVE-2015-3755
WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, as used in iOS before 8.4.1 and other products, allows remote attackers to spoof the user interface via a malformed URL.
MEDIUM 4.3EPSS 2.23%
Does this matter?
Lower severity and a low EPSS score (2.23%). Track it; it rarely justifies an emergency change on its own.
Description
WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, as used in iOS before 8.4.1 and other products, allows remote attackers to spoof the user interface via a malformed URL.
- CVSS 2.0
- 4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
- EPSS
- 2.23% probability · 82th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-254
- Affected
- apple/safari · apple/iphone os
- Source
- product-security@apple.com
References
- http://lists.apple.com/archives/security-announce/2015/Aug/msg00000.htmlMailing List, Vendor Advisory
- http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.htmlMailing List, Vendor Advisory
- http://lists.opensuse.org/opensuse-updates/2016-03/msg00054.htmlMailing List, Third Party Advisory
- http://www.securityfocus.com/bid/76344Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1033274Third Party Advisory, VDB Entry
- https://support.apple.com/kb/HT205030Vendor Advisory
- https://support.apple.com/kb/HT205033Vendor Advisory
- http://lists.apple.com/archives/security-announce/2015/Aug/msg00000.htmlMailing List, Vendor Advisory
- http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.htmlMailing List, Vendor Advisory
- http://lists.opensuse.org/opensuse-updates/2016-03/msg00054.htmlMailing List, Third Party Advisory
- http://www.securityfocus.com/bid/76344Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1033274Third Party Advisory, VDB Entry
- https://support.apple.com/kb/HT205030Vendor Advisory
- https://support.apple.com/kb/HT205033Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.