CVE-2015-1122: apple iphone_os
Vulnerability summary
CVE-2015-1122 is a medium (CVSS 6.8) vulnerability in apple iphone_os. EPSS estimates a 3.13% chance of exploitation in the next 30 days, higher than 87.6% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 4 · Related 2Timeline
- 10-04-2015PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
WebKit, as used in Apple iOS before 8.3, Apple TV before 7.2, and Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-04-08-1, APPLE-SA-2015-04-08-3, and APPLE-SA-2015-04-08-4.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
3.13%
Chance of exploitation in the next 30 days
Percentile
88%
Versus all other CVEs
30-day change
0.00 pp
From 3.13% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Apple4 products
Ubuntu3 products
- qtwebkit-opensource-srcAll versions (No fix recorded)
- qtwebkit-sourceAll versions (No fix recorded)
- webkitgtk< 2.4.10-0ubuntu0.14.04.1 | < 2.4.10-0ubuntu1
2 vendors · 7 products
References
16 links- lists.apple.com/archives/security-announce/2015/Apr/msg00002.htmlVendor AdvisoryX Refsource APPLEREPORT
- lists.apple.com/archives/security-announce/2015/Jun/msg00006.htmlVendor AdvisoryX Refsource APPLEPatch
- lists.apple.com/archives/security-announce/2015/Apr/msg00000.htmlVendor AdvisoryX Refsource APPLEREPORT
Show all 16 references
- lists.apple.com/archives/security-announce/2015/Apr/msg00003.htmlVendor AdvisoryX Refsource APPLEREPORT