VULNERABILITY INTELLIGENCE

CVE-2014-4467

CVSS score4.3 MEDIUM
EPSS probability1.15%
CISA KEVNot currently listed
Published2015-01-30
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:N/C:N/I:P/A:N

Description

WebKit, as used in Apple iOS before 8.1.3, does not properly determine scrollbar boundaries during the rendering of FRAME elements, which allows remote attackers to spoof the UI via a crafted web site.

Primary references