CVE-2015-7104
WebKit in Apple Safari before 9.0.2 and tvOS before 9.1 allows remote attackers to execute...
WebKit in Apple Safari before 9.0.2 and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
Exploit likelihood
What each source reports
NVD Score used
WebKit in Apple Safari before 9.0.2 and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
- Record
CVE-2015-7104- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
WebKit in Apple Safari before 9.0.2 and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
- Record
CVE-2015-7104- Updated
- 2026-11-02
EUVDEUVD-2015-7036 No score
WebKit in Apple Safari before 9.0.2 and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
- Record
EUVD-2015-7036- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-f8vv-xg65-q478 No score
WebKit in Apple Safari before 9.0.2 and tvOS before 9.1 allows remote attackers to execute...
WebKit in Apple Safari before 9.0.2 and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
- Record
GHSA-f8vv-xg65-q478- Weakness
- CWE-119
- Updated
- 2026-11-02
OSVMGASA-2016-0116 No score
Updated webkit2 packages fix security vulnerability
The webkit2 package has been updated to version 2.10.9, fixing several security issues and other bugs.
- Record
MGASA-2016-0116- Updated
- 2026-11-02
OSVUBUNTU-CVE-2015-7104 No score
WebKit in Apple Safari before 9.0.2 and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
- Record
UBUNTU-CVE-2015-7104- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
webkit2Mageia:5 From an advisory covering 106 CVEs |
before 2.10.9-1.mga5 | 2.10.9-1.mga5 |
qtwebkit-opensource-srcUbuntu:16.04:LTS |
All versions, plus listed versions 5.4.2+dfsg-1ubuntu2.15.5.1+dfsg-2ubuntu1 |
None known |
qtwebkit-sourceUbuntu:16.04:LTS |
All versions, plus listed versions 2.3.2-0ubuntu102.3.2-0ubuntu11 |
None known |
webkitgtkUbuntu:16.04:LTS |
All versions, plus listed versions 2.4.9-2ubuntu22.4.10-0ubuntu12.4.11-0ubuntu0.1 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2015-7104 is a medium vulnerability (CVSS 6.8) in Apple Safari, published December 11, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.48%, the 84th percentile. No source names a fixed version.
References
support.apple.com/kb/HT205636
lists.opensuse.org/opensuse-updates/2016-03/msg00054.html
lists.apple.com/archives/security-announce/2015/Dec/msg00003.html
securitytracker.com/id/1034341
Show 25 moreShow less
securityfocus.com/bid/78726
nvd.nist.gov/vuln/detail/CVE-2015-7104
github.com/advisories/GHSA-f8vv-xg65-q478
advisories.mageia.org/MGASA-2016-0116.html
bugs.mageia.org/show_bug.cgi?id=17662
webkitgtk.org/security/WSA-2015-0002.html
webkitgtk.org/2015/04/14/webkitgtk2.8.1-released.html
ubuntu.com/security/CVE-2015-7104
cve.org/CVERecord?id=CVE-2015-7104