CVE-2015-7104
WebKit in Apple Safari before 9.0.2 and tvOS before 9.1 allows remote attackers to execute...
CVE-2015-7104 is a medium vulnerability (CVSS 6.8) in Apple Safari, published December 11, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.48%, the 84th percentile. No source names a fixed version.
- Severity
- 6.8 MediumCVSS 2.0, NVD
- Exploit chance
- 2.48%EPSS, 84th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
WebKit in Apple Safari before 9.0.2 and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
webkit2Mageia:5 From an advisory covering 106 CVEs | before 2.10.9-1.mga5 | 2.10.9-1.mga5 |
qtwebkit-opensource-srcUbuntu:16.04:LTS | All versions, plus listed versions 5.4.2+dfsg-1ubuntu2.15.5.1+dfsg-2ubuntu1 | None known |
qtwebkit-sourceUbuntu:16.04:LTS | All versions, plus listed versions 2.3.2-0ubuntu102.3.2-0ubuntu11 | None known |
webkitgtkUbuntu:16.04:LTS | All versions, plus listed versions 2.4.9-2ubuntu22.4.10-0ubuntu12.4.11-0ubuntu0.1 | None known |
What each source reports
NVD Score used
WebKit in Apple Safari before 9.0.2 and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
- Record
CVE-2015-7104- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE ListNo score
WebKit in Apple Safari before 9.0.2 and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
- Record
CVE-2015-7104- Updated
- 2026-11-02
EUVDEUVD-2015-7036No score
WebKit in Apple Safari before 9.0.2 and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
- Record
EUVD-2015-7036- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-f8vv-xg65-q478No score
WebKit in Apple Safari before 9.0.2 and tvOS before 9.1 allows remote attackers to execute...
WebKit in Apple Safari before 9.0.2 and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
- Record
GHSA-f8vv-xg65-q478- Weakness
- CWE-119
- Updated
- 2026-11-02
OSVMGASA-2016-0116No score
Updated webkit2 packages fix security vulnerability
The webkit2 package has been updated to version 2.10.9, fixing several security issues and other bugs.
- Record
MGASA-2016-0116- Updated
- 2026-11-02
OSVUBUNTU-CVE-2015-7104No score
WebKit in Apple Safari before 9.0.2 and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
- Record
UBUNTU-CVE-2015-7104- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
support.apple.com/kb/HT205636
lists.opensuse.org/opensuse-updates/2016-03/msg00054.html
lists.apple.com/archives/security-announce/2015/Dec/msg00003.html
securitytracker.com/id/1034341
Show 25 moreShow less
securityfocus.com/bid/78726
nvd.nist.gov/vuln/detail/CVE-2015-7104
github.com/advisories/GHSA-f8vv-xg65-q478
advisories.mageia.org/MGASA-2016-0116.html
bugs.mageia.org/show_bug.cgi?id=17662
webkitgtk.org/security/WSA-2015-0002.html
webkitgtk.org/2015/04/14/webkitgtk2.8.1-released.html
ubuntu.com/security/CVE-2015-7104
cve.org/CVERecord?id=CVE-2015-7104