CVE-2015-1080: Medium severity safari vulnerability
WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other CVEs listed in APPLE-SA-2015-03-17-1.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2015-1080?
CVE-2015-1080 has been rated as critical due to the potential for remote code execution and denial of service.
How do I fix CVE-2015-1080?
To fix CVE-2015-1080, users should update their Apple Safari browser to version 6.2.4 or later for Safari 6, 7.1.4 or later for Safari 7, and 8.0.4 or later for Safari 8.
What platforms are affected by CVE-2015-1080?
CVE-2015-1080 affects multiple versions of Apple Safari as well as Apple iPhone OS and tvOS.
Can CVE-2015-1080 lead to data breaches?
Yes, CVE-2015-1080 can potentially lead to data breaches if exploited, as it allows remote attackers to execute arbitrary code.
Is there a workaround for CVE-2015-1080 if I can't update immediately?
There is no known workaround for CVE-2015-1080; users are advised to upgrade their Safari browser as soon as possible.