CVE-2015-3727

WebKit in Apple Safari before 6.2.7, 7.x before 7.1.7, and 8.x before 8.0.7, as used in Apple iOS before 8.4 and other products, does not properly restrict rename operations on WebSQL tables, which allows remote attackers to access an arbitrary web site's database via a crafted web site.

• CWE-264

• http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.htmlVendor Advisory
• http://lists.apple.com/archives/security-announce/2015/Jun/msg00004.htmlVendor Advisory
• http://lists.opensuse.org/opensuse-updates/2016-03/msg00132.html
• http://support.apple.com/kb/HT204941Vendor Advisory
• http://support.apple.com/kb/HT204950Vendor Advisory
• http://www.securityfocus.com/bid/75492
• http://www.securitytracker.com/id/1032754
• http://www.ubuntu.com/usn/USN-2937-1
• http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.htmlVendor Advisory
• http://lists.apple.com/archives/security-announce/2015/Jun/msg00004.htmlVendor Advisory
• http://lists.opensuse.org/opensuse-updates/2016-03/msg00132.html
• http://support.apple.com/kb/HT204941Vendor Advisory
• http://support.apple.com/kb/HT204950Vendor Advisory
• http://www.securityfocus.com/bid/75492
• http://www.securitytracker.com/id/1032754
• http://www.ubuntu.com/usn/USN-2937-1

Published

Jul 3, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-3721The kernel in Apple iOS before 8.4 and OS X before 10.10.4 d…
• CVE-2015-3722Application Store in Apple iOS before 8.4 does not ensure th…
• CVE-2015-3723CoreGraphics in Apple iOS before 8.4 allows remote attackers…
• CVE-2015-3724CoreGraphics in Apple iOS before 8.4 allows remote attackers…
• CVE-2015-3725MobileInstallation in Apple iOS before 8.4 does not ensure t…
• CVE-2015-3726The Telephony subsystem in Apple iOS before 8.4 allows physi…
• CVE-2015-3728The WiFi Connectivity feature in Apple iOS before 8.4 allows…
• CVE-2015-3729Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before …
• CVE-2015-3730WebKit, as used in Apple iOS before 8.4.1 and Safari before …
• CVE-2015-3731WebKit, as used in Apple iOS before 8.4.1 and Safari before …
• CVE-2015-3732WebKit, as used in Apple iOS before 8.4.1 and Safari before …
• CVE-2015-3733WebKit, as used in Apple iOS before 8.4.1 and Safari before …