CVE-2015-5858
apple: no CVSS score yet. EPSS 2.2% chance of exploitation in the next 30 days.
The CFNetwork HTTPProtocol component in Apple iOS before 9 allows remote attackers to bypass the HSTS protection mechanism, and consequently obtain sensitive information, via a crafted URL.
- EPSS
- 2.2% chance of exploitation in the next 30 days; higher than 82% of CVEs (scores of 2026-11-01)
- CWE
- CWE-200
- Published
- Modified
- Record from
- the NVD, synced
Affected
- apple:iphone_os
- apple:watchos