Latest CVE Feed
-
5.0
MEDIUMCVE-2015-3753
WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, as used in iOS before 8.4.1 and other products, does not properly perform taint checking for CANVAS elements, which allows remote attackers to bypass the Same Origin Policy and o... Read more
- Published: Aug. 16, 2015
- Modified: Apr. 12, 2025
-
5.0
MEDIUMCVE-2015-3752
The Content Security Policy implementation in WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, as used in iOS before 8.4.1 and other products, does not properly restrict cookie transmission for report requests, which allows rem... Read more
- Published: Aug. 16, 2015
- Modified: Apr. 12, 2025
-
5.0
MEDIUMCVE-2015-3751
WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, as used in iOS before 8.4.1 and other products, allows remote attackers to bypass a Content Security Policy protection mechanism by using a video control in conjunction with an I... Read more
- Published: Aug. 16, 2015
- Modified: Apr. 12, 2025
-
6.4
MEDIUMCVE-2015-3750
WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, as used in iOS before 8.4.1 and other products, does not enforce the HTTP Strict Transport Security (HSTS) protection mechanism for Content Security Policy (CSP) report requests,... Read more
- Published: Aug. 16, 2015
- Modified: Apr. 12, 2025
-
6.8
MEDIUMCVE-2015-3749
WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a d... Read more
- Published: Aug. 16, 2015
- Modified: Apr. 12, 2025
-
6.8
MEDIUMCVE-2015-3748
WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a d... Read more
- Published: Aug. 16, 2015
- Modified: Apr. 12, 2025
-
6.8
MEDIUMCVE-2015-3747
WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a d... Read more
- Published: Aug. 16, 2015
- Modified: Apr. 12, 2025
-
6.8
MEDIUMCVE-2015-3746
WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a d... Read more
- Published: Aug. 16, 2015
- Modified: Apr. 12, 2025
-
6.8
MEDIUMCVE-2015-3745
WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a d... Read more
- Published: Aug. 16, 2015
- Modified: Apr. 12, 2025
-
6.8
MEDIUMCVE-2015-3744
WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a d... Read more
- Published: Aug. 16, 2015
- Modified: Apr. 12, 2025
-
6.8
MEDIUMCVE-2015-3743
WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a d... Read more
- Published: Aug. 16, 2015
- Modified: Apr. 12, 2025
-
6.8
MEDIUMCVE-2015-3742
WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a d... Read more
- Published: Aug. 16, 2015
- Modified: Apr. 12, 2025
-
6.8
MEDIUMCVE-2015-3741
WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a d... Read more
- Published: Aug. 16, 2015
- Modified: Apr. 12, 2025
-
6.8
MEDIUMCVE-2015-3740
WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a d... Read more
- Published: Aug. 16, 2015
- Modified: Apr. 12, 2025
-
6.8
MEDIUMCVE-2015-3739
WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a d... Read more
- Published: Aug. 16, 2015
- Modified: Apr. 12, 2025
-
6.8
MEDIUMCVE-2015-3738
WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a d... Read more
- Published: Aug. 16, 2015
- Modified: Apr. 12, 2025
-
6.8
MEDIUMCVE-2015-3737
WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a d... Read more
- Published: Aug. 16, 2015
- Modified: Apr. 12, 2025
-
6.8
MEDIUMCVE-2015-3736
WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a d... Read more
- Published: Aug. 16, 2015
- Modified: Apr. 12, 2025
-
6.8
MEDIUMCVE-2015-3735
WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a d... Read more
- Published: Aug. 16, 2015
- Modified: Apr. 12, 2025
-
6.8
MEDIUMCVE-2015-3734
WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a d... Read more
- Published: Aug. 16, 2015
- Modified: Apr. 12, 2025