CVE-2015-1154

CVE-2015-1154 is a memory corruption vulnerability in WebKit, affecting Apple Safari versions prior to 6.2.6, 7.1.6, and 8.0.6, as well as Apple iTunes. A remote attacker could exploit this by enticing a user to visit a crafted website, potentially leading to arbitrary code execution or a denial of service (application crash). This vulnerability has a CVSS score of 6.8, indicating a medium severity. It can be exploited over the network with medium attack complexity, and successful exploitation could result in partial compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, nor are there publicly available exploit modules like Metasploit or Nuclei. Despite a low EPSS score, the vulnerability has garnered some community discussion and media coverage, suggesting it received attention at the time of its disclosure.