Lucene search

K
cvelistAppleCVELIST:CVE-2015-3753
HistoryAug 16, 2015 - 11:00 p.m.

CVE-2015-3753

2015-08-1623:00:00
apple
www.cve.org

8.2 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.8%

WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, as used in iOS before 8.4.1 and other products, does not properly perform taint checking for CANVAS elements, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive image data by leveraging a redirect to a data:image resource.

8.2 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.8%