CVE-2015-5825

WebKit in Apple iOS before 9 does not properly restrict the availability of Performance API times, which allows remote attackers to obtain sensitive…

published September 18, 2015

CVSS
—
EPSS
2%
Percentile
80.8
In the wild
Unconfirmed
What it is

WebKit in Apple iOS before 9 does not properly restrict the availability of Performance API times, which allows remote attackers to obtain sensitive information about the browser history, mouse movement, or network traffic via crafted JavaScript code.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02022 · 80.8th percentile
Published
2015-09-18T10:00Z
EPSS history
Timeline
  • 18 SEP 10:00Z
    WebKit in Apple iOS before 9 does not properly restrict the availability of Performance API times, which allows remote attackers to obtain sensitive…
    cvelistv5