CVE-2015-1153: apple iphone_os
Vulnerability summary
CVE-2015-1153 is a medium (CVSS 6.8) vulnerability in apple iphone_os. EPSS estimates a 3.11% chance of exploitation in the next 30 days, higher than 87.6% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 4 · Related 2Timeline
- 08-05-2015PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
WebKit, as used in Apple Safari before 6.2.6, 7.x before 7.1.6, and 8.x before 8.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2015-1152 and CVE-2015-1154.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
3.11%
Chance of exploitation in the next 30 days
Percentile
88%
Versus all other CVEs
30-day change
0.00 pp
From 3.11% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Apple3 products
Ubuntu3 products
- qtwebkit-opensource-srcAll versions (No fix recorded)
- qtwebkit-sourceAll versions (No fix recorded)
- webkitgtk< 2.4.10-0ubuntu0.14.04.1 | < 2.4.10-0ubuntu1
2 vendors · 6 products
References
15 links- lists.apple.com/archives/security-announce/2015/Jun/msg00006.htmlVendor AdvisoryX Refsource APPLEPatch
- lists.apple.com/archives/security-announce/2015/Sep/msg00003.htmlVendor AdvisoryX Refsource APPLEPatch
Show all 15 references
- lists.apple.com/archives/security-announce/2015/May/msg00000.htmlVendor AdvisoryX Refsource APPLEREPORT