{"id":"CVE-2015-1084","aliases":["EUVD-2015-1227","GHSA-94p8-6mcv-x2gr"],"status":"published","title":"The user interface in WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x...","description":"The user interface in WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, does not display URLs consistently, which makes it easier for remote attackers to conduct phishing attacks via a crafted URL.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.01933,"percentile":0.80161,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-17"],"published":"2015-03-18T22:00:00Z","modified":"2026-06-17T00:21:44Z","products":[{"vendor":"apple","product":"iphone_os"},{"vendor":"apple","product":"safari"}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html","tags":["vendor-advisory","x_refsource_APPLE","x_transferred","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2015/Mar/msg00004.html","tags":["vendor-advisory","x_refsource_APPLE","x_transferred","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1031936","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"https://support.apple.com/HT204560","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://support.apple.com/HT204661","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-1084"},{"url":"https://github.com/advisories/GHSA-94p8-6mcv-x2gr"}],"sources":{"cve":[{"id":"CVE-2015-1084","description":"The user interface in WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, does not display URLs consistently, which makes it easier for remote attackers to conduct phishing attacks via a crafted URL.","status":"published","published":"2015-03-18T22:00:00Z","modified":"2024-08-06T04:33:20.242Z","updated_at":"2026-11-02T14:35:44.404481Z"}],"euvd":[{"id":"EUVD-2015-1227","description":"The user interface in WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, does not display URLs consistently, which makes it easier for remote attackers to conduct phishing attacks via a crafted URL.","status":"published","published":"2015-03-18T22:00:00Z","modified":"2024-08-06T04:33:20Z","updated_at":"2026-11-03T02:22:17.03063Z"}],"ghsa":[{"id":"GHSA-94p8-6mcv-x2gr","title":"The user interface in WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x...","description":"The user interface in WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, does not display URLs consistently, which makes it easier for remote attackers to conduct phishing attacks via a crafted URL.","status":"published","published":"2022-05-17T04:06:29Z","modified":"2023-01-28T05:01:04Z","updated_at":"2026-11-02T14:43:28.398824Z"}],"nvd":[{"id":"CVE-2015-1084","description":"The user interface in WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, does not display URLs consistently, which makes it easier for remote attackers to conduct phishing attacks via a crafted URL.","status":"published","published":"2015-03-18T22:59:15.127Z","modified":"2026-06-17T00:21:44.913Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-17"],"updated_at":"2026-11-02T14:03:03.313464Z"}]}}