Apple Safari URI spoofing (CVE-2015-5764)

tl;dr Apple Safari for OS X was prone to URI spoofing vulnerability and more general a user interface spoofing. Apple released security updates for Safari 9 on OS X and assigned CVE-2015-5764. Accidentally this vulnerability was also present in iOS. Instant demo In Safari up to 8.0.8 : go to clic...

CVE-2015-5764

CVE-2015-5764 is a Safari UI spoofing vulnerability in iOS prior to iOS 9. The issue allows a remote attacker to spoof displayed URLs via unspecified vectors, enabling potential phishing-type deception. The CVE is listed among Safari 9 updates (Apple SA 2015-09-30-2) and Apple advises updating to...