Unrated severityNVD Advisory· Published Jul 3, 2015· Updated Jun 17, 2026
CVE-2015-3659
CVE-2015-3659
Description
The SQLite authorizer in the Storage functionality in WebKit in Apple Safari before 6.2.7, 7.x before 7.1.7, and 8.x before 8.0.7, as used in Apple iOS before 8.4 and other products, does not properly restrict access to SQL functions, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted web site.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
27cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*+ 22 more
- cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*range: <=6.2.6
- cpe:2.3:a:apple:safari:7.0:*:*:*:*:*:*:*
- cpe:2.3:a:apple:safari:7.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:apple:safari:7.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:apple:safari:7.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:apple:safari:7.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:apple:safari:7.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:apple:safari:7.0.6:*:*:*:*:*:*:*
- cpe:2.3:a:apple:safari:7.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:apple:safari:7.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:apple:safari:7.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:apple:safari:7.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:apple:safari:7.1.4:*:*:*:*:*:*:*
- cpe:2.3:a:apple:safari:7.1.5:*:*:*:*:*:*:*
- cpe:2.3:a:apple:safari:7.1.6:*:*:*:*:*:*:*
- cpe:2.3:a:apple:safari:8.0:*:*:*:*:*:*:*
- cpe:2.3:a:apple:safari:8.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:apple:safari:8.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:apple:safari:8.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:apple:safari:8.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:apple:safari:8.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:apple:safari:8.0.6:*:*:*:*:*:*:*
- (no CPE)range: < 6.2.7, 7.x < 7.1.7, 8.x < 8.0.7
- Range: < 8.4
Patches
Vulnerability mechanics
References
8- lists.apple.com/archives/security-announce/2015/Jun/msg00001.htmlnvdVendor Advisory
- lists.apple.com/archives/security-announce/2015/Jun/msg00004.htmlnvdVendor Advisory
- support.apple.com/kb/HT204941nvdVendor Advisory
- support.apple.com/kb/HT204950nvdVendor Advisory
- lists.opensuse.org/opensuse-updates/2016-03/msg00132.htmlnvd
- www.securityfocus.com/bid/75492nvd
- www.securitytracker.com/id/1032754nvd
- www.ubuntu.com/usn/USN-2937-1nvd
News mentions
0No linked articles in our index yet.