CVE-2015-1084

MITTEL 5.0CVE-2015-1084 · Published 18/03/2015 · updated 17/06/2026

Kurz gesagt

CVE-2015-1084 ist eine Schwachstelle (MITTEL (CVSS 5.0)) in safari (apple).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 1.9%, höher als bei 80.1% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
safari apple	`= 7.0= 7.0.1= 7.0.2= 7.0.3= 7.0.4= 7.0.5= 7.0.6= 7.1.0= 7.1.1= 7.1.2= 7.1.3= 8.0.0= 8.0.1= 8.0.2= 8.0.3≤ 6.2.3`	No fix yet

Description

The user interface in WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, does not display URLs consistently, which makes it easier for remote attackers to conduct phishing attacks via a crafted URL.

References

lists.apple.com/archives/security-announce/2015/Apr/msg00002.html · Vendor Advisory
lists.apple.com/archives/security-announce/2015/Mar/msg00004.html · Vendor Advisory
securitytracker.com/id/1031936
support.apple.com/HT204560 · Vendor Advisory
support.apple.com/HT204661 · Vendor Advisory

Weitere Schwachstellen in safari

Alle anzeigen →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

safari

apple

= 7.0= 7.0.1= 7.0.2= 7.0.3= 7.0.4= 7.0.5= 7.0.6= 7.1.0= 7.1.1= 7.1.2= 7.1.3= 8.0.0= 8.0.1= 8.0.2= 8.0.3≤ 6.2.3

No fix yet

Weitere Schwachstellen in safari

Alle anzeigen →