Vulnerability in Apple Iphone OS
CVE-2015-3755
WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, as used in iOS before 8.4.1 and other products, allows remote attackers to spoof the user interface via a malformed URL.
EPSS: 0.022 (80.9th percentile) — read the EPSS interpretation.
Affected products
- Apple Iphone_os
- Apple Safari
- N/a — versions n/a
Weakness classification (CWE)
References
- product-security@apple.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
- product-security@apple.com (x_refsource_CONFIRM, Vendor Advisory)
- product-security@apple.com (vendor-advisory, Mailing List, Third Party Advisory, x_refsource_SUSE)
- product-security@apple.com (vendor-advisory, x_refsource_APPLE, Mailing List, Vendor Advisory)
- product-security@apple.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
- product-security@apple.com (vendor-advisory, x_refsource_APPLE, Mailing List, Vendor Advisory)
- product-security@apple.com (x_refsource_CONFIRM, Vendor Advisory)