CVE-2014-4477: Apple iPhone OS

Medium severity, CVSS 6.8. EPSS: 2.8% chance of exploitation in the next 30 days.

WebKit, as used in Apple iOS before 8.1.3; Apple Safari before 6.2.3, 7.x before 7.1.3, and 8.x before 8.0.3; and Apple TV before 7.0.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2014-4476 and CVE-2014-4479.

Affected products

• Apple iPhone OS: up to and including 8.1.2
• Apple iTunes: up to and including 12.1
• Apple Safari: up to and including 6.2.2; version 7.0 only; version 7.0.1 only; version 7.0.2 only; version 7.0.3 only; version 7.0.4 only; …
• Apple tvOS: up to and including 7.0.1

Published 2015-01-30. Last modified 2026-06-17.