CVE-2015-3710

Mail in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to trigger a refresh operation, and consequently cause a visit to an arbitrary web site, via a crafted HTML e-mail message.

• CWE-254

• http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.htmlVendor Advisory
• http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.htmlPatch, Vendor Advisory
• http://support.apple.com/kb/HT204941Vendor Advisory
• http://support.apple.com/kb/HT204942Vendor Advisory
• http://www.securityfocus.com/bid/75491
• http://www.securitytracker.com/id/1032760
• http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.htmlVendor Advisory
• http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.htmlPatch, Vendor Advisory
• http://support.apple.com/kb/HT204941Vendor Advisory
• http://support.apple.com/kb/HT204942Vendor Advisory
• http://www.securityfocus.com/bid/75491
• http://www.securitytracker.com/id/1032760

Published

Jul 3, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-3704runner in Install.framework in the Install Framework Legacy …
• CVE-2015-3705IOAcceleratorFamily in Apple OS X before 10.10.4 allows atta…
• CVE-2015-3706IOAcceleratorFamily in Apple OS X before 10.10.4 allows atta…
• CVE-2015-3707The FireWire driver in IOFireWireFamily in Apple OS X before…
• CVE-2015-3708kextd in kext tools in Apple OS X before 10.10.4 allows atta…
• CVE-2015-3709Race condition in kext tools in Apple OS X before 10.10.4 al…
• CVE-2015-3711The NTFS implementation in Apple OS X before 10.10.4 allows …
• CVE-2015-3712The NVIDIA graphics driver in Apple OS X before 10.10.4 allo…
• CVE-2015-3713QuickTime in Apple OS X before 10.10.4 allows remote attacke…
• CVE-2015-3714Apple OS X before 10.10.4 does not properly consider custom …
• CVE-2015-3715The code-signing implementation in Apple OS X before 10.10.4…
• CVE-2015-3716Spotlight in Apple OS X before 10.10.4 allows attackers to e…