CVE-2015-1125: Apple iPhone OS

Medium severity, CVSS 4.3. EPSS: 1.4% chance of exploitation in the next 30 days.

The touch-events implementation in WebKit in Apple iOS before 8.3 allows remote attackers to trigger an association between a tap and an unintended web resource via a crafted web site.

Affected products

• Apple iPhone OS: up to and including 8.2

Published 2015-04-10. Last modified 2026-06-17.