CVE-2015-3752: The Content Security Policy implementation in WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8....

Security readout for executives and security teams

CVE-2015-3752 is an Apple WebKit/Safari privacy leak. A website could cause Content Security Policy reports to include cookies that should not be sent, exposing sensitive session data across origins or from private browsing contexts. Exposure is mainly legacy Safari, iOS, and WebKit-based products matching the affected versions. The bundled references also include Ubuntu and openSUSE advisories, so environments with old WebKit packages should verify distribution-specific exposure. Treat this as a legacy client cleanup issue unless old Apple or WebKit-based browsers remain in use. The business risk is cookie exposure, which can affect authenticated sessions, but the provided sources do not show active exploitation. Mitigation focus: Upgrade Safari to 6.2.8, 7.1.8, 8.0.8, or later as applicable.; Upgrade iOS to 8.4.1 or later, preferably a supported current release.; Apply relevant Apple, Ubuntu, or openSUSE WebKit security updates..

Prepared

Jun 13, 2026, 22:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.