Lucene search

K
cvelistAppleCVELIST:CVE-2015-3753
HistoryAug 16, 2015 - 11:00 p.m.

CVE-2015-3753

2015-08-1623:00:00
apple
www.cve.org
6

AI Score

8.2

Confidence

High

EPSS

0.003

Percentile

70.8%

WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, as used in iOS before 8.4.1 and other products, does not properly perform taint checking for CANVAS elements, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive image data by leveraging a redirect to a data:image resource.

AI Score

8.2

Confidence

High

EPSS

0.003

Percentile

70.8%