Lucene search
HistorySep 18, 2015 - 10:59 a.m.
CVE-2015-5826
cve-2015-5826
webkit
apple
ios
same origin policy
css
nvd
5.9 Medium
AI Score
Confidence
Low
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.004 Low
EPSS
Percentile
72.1%
WebKit in Apple iOS before 9 does not properly select the cases in which a Cascading Style Sheets (CSS) document is required to have the text/css content type, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.
| CPE | Name | Operator | Version |
|---|---|---|---|
| apple:safari | apple safari | le | 8.0.8 |
| apple:iphone_os | apple iphone os | le | 8.4.1 |
Related
ubuntucve
ubuntucve
CVE-2015-5826
2015-09-18 00:00:00
prion
prion
Authentication flaw
2015-09-18 10:59:00
openvas
openvas
Apple Safari Multiple Vulnerabilities-01 (Oct 2015) - Mac OS X
2015-10-13 00:00:00
nessus
nessus
Mac OS X : Apple Safari < 9.0 Multiple Vulnerabilities
2015-10-02 00:00:00
Mac OS X < 10.11 Multiple Vulnerabilities (GHOST)
2015-10-05 00:00:00
securityvulns
securityvulns
APPLE-SA-2015-09-30-2 Safari 9
2015-10-05 00:00:00
Apple Safari / Webkit multiple security vulnerabilities
2015-10-25 00:00:00
APPLE-SA-2015-09-16-1 iOS 9
2015-10-05 00:00:00
5.9 Medium
AI Score
Confidence
Low
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.004 Low
EPSS
Percentile
72.1%
Related for CVE-2015-5826