CVE-2015-5823
WebKit, as used in JavaScriptCore in Apple iOS before 9 and iTunes before 12.3, allows remote...
WebKit, as used in JavaScriptCore in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and APPLE-SA-2015-09-16-3.
Exploit likelihood
What each source reports
NVD Score used
WebKit, as used in JavaScriptCore in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and APPLE-SA-2015-09-16-3.
- Record
CVE-2015-5823- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
WebKit, as used in JavaScriptCore in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and APPLE-SA-2015-09-16-3.
- Record
CVE-2015-5823- Updated
- 2026-11-02
EUVDEUVD-2015-5769 No score
WebKit, as used in JavaScriptCore in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and APPLE-SA-2015-09-16-3.
- Record
EUVD-2015-5769- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7842-cfcm-wcw3 No score
WebKit, as used in JavaScriptCore in Apple iOS before 9 and iTunes before 12.3, allows remote...
WebKit, as used in JavaScriptCore in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and APPLE-SA-2015-09-16-3.
- Record
GHSA-7842-cfcm-wcw3- Weakness
- CWE-119
- Updated
- 2026-11-02
OSVMGASA-2016-0116 No score
Updated webkit2 packages fix security vulnerability
The webkit2 package has been updated to version 2.10.9, fixing several security issues and other bugs.
- Record
MGASA-2016-0116- Updated
- 2026-11-02
OSVUBUNTU-CVE-2015-5823 No score
WebKit, as used in JavaScriptCore in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and APPLE-SA-2015-09-16-3.
- Record
UBUNTU-CVE-2015-5823- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
webkit2Mageia:5 From an advisory covering 106 CVEs |
before 2.10.9-1.mga5 | 2.10.9-1.mga5 |
qtwebkit-opensource-srcUbuntu:16.04:LTS |
All versions, plus listed versions 5.4.2+dfsg-1ubuntu2.15.5.1+dfsg-2ubuntu1 |
None known |
qtwebkit-sourceUbuntu:16.04:LTS |
All versions, plus listed versions 2.3.2-0ubuntu102.3.2-0ubuntu11 |
None known |
webkitgtkUbuntu:16.04:LTS |
All versions, plus listed versions 2.4.9-2ubuntu22.4.10-0ubuntu12.4.11-0ubuntu0.1 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2015-5823 is a medium vulnerability (CVSS 6.8) in Apple Itunes, published September 18, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.50%, the 84th percentile. No source names a fixed version.
References
support.apple.com/HT205221
securitytracker.com/id/1033609
securityfocus.com/bid/76764
lists.apple.com/archives/security-announce/2015/Sep/msg00003.html
Show 25 moreShow less
nvd.nist.gov/vuln/detail/CVE-2015-5823
github.com/advisories/GHSA-7842-cfcm-wcw3
advisories.mageia.org/MGASA-2016-0116.html
bugs.mageia.org/show_bug.cgi?id=17662
webkitgtk.org/security/WSA-2015-0002.html
webkitgtk.org/2015/04/14/webkitgtk2.8.1-released.html
ubuntu.com/security/CVE-2015-5823
cve.org/CVERecord?id=CVE-2015-5823