Vulnerability Database

299,751

Total vulnerabilities in the database

CVE-2015-3727

WebKit in Apple Safari before 6.2.7, 7.x before 7.1.7, and 8.x before 8.0.7, as used in Apple iOS before 8.4 and other products, does not properly restrict rename operations on WebSQL tables, which allows remote attackers to access an arbitrary web site's database via a crafted web site.

  • Published: Jul 3, 2015
  • Updated: Nov 9, 2025
  • CVE: CVE-2015-3727
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 6.8
  • AV:N/AC:M/Au:N/C:P/I:P/A:P

CWEs:

Software From Fixed in
apple / safari 7.0.1 7.0.1.x
apple / safari 8.0.2 8.0.2.x
apple / safari 8.0.1 8.0.1.x
apple / safari 7.0.3 7.0.3.x
apple / safari 7.0.4 7.0.4.x
apple / safari 7.1.0 7.1.0.x
apple / safari 7.1.6 7.1.6.x
apple / safari 8.0.6 8.0.6.x
apple / safari 7.0.5 7.0.5.x
apple / safari 7.1.5 7.1.5.x
apple / safari 7.0.6 7.0.6.x
apple / safari 7.1.3 7.1.3.x
apple / safari 7.1.1 7.1.1.x
apple / safari 7.0 7.0.x
apple / safari 7.1.4 7.1.4.x
apple / safari 8.0.3 8.0.3.x
apple / safari 8.0.5 8.0.5.x
apple / safari 8.0.4 8.0.4.x
apple / safari 7.1.2 7.1.2.x
apple / safari - 6.2.6.x
apple / safari 7.0.2 7.0.2.x
apple / safari 8.0 8.0.x
apple / mac_os_x - 10.10.3.x
apple / iphone_os - 8.3.x