CVE-2015-3754

MEDIUM · CVSS 4.3 EPSS 1.93%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2015-08-16 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2015-3754

Severity

MEDIUM

CVSS

4.3

EPSS

1.93%

Original Filing — NVD Description

The private-browsing implementation in WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8 does not prevent caching of HTTP authentication credentials, which makes it easier for remote attackers to track users via a crafted web site.