Is CVE-2015-5895 actively exploited?

A proof-of-concept exploit is publicly available for CVE-2015-5895, but active exploitation has not been confirmed.

Can CVE-2015-5895 be exploited remotely?

Yes. CVE-2015-5895 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2015-5895?

CVE-2015-5895 has a CVSS score of 10.0 (CRITICAL).

HOME VULNERABILITIESCVE-2015-5895

CRITICALPOC

CVE-2015-5895

NVD-CWE-noinfoPublished: September 18, 2015· Updated: Jun 17, 2026

10.0

CVSS v3.1

Official Description

Multiple unspecified vulnerabilities in SQLite before 3.8.10.2, as used in Apple iOS before 9, have unknown impact and attack vectors.

NVD Source

Technical Analysis

CVE-2015-5895 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

Exploitation requires some privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A proof-of-concept (PoC) exploit exists for CVE-2015-5895. While not yet confirmed in active campaigns, the availability of PoC code increases exploitation risk substantially.

CVSS v3.1 Vector Breakdown

Exploitability

Attack VectorNetwork

Attack ComplexityLow

Privileges Req.

User Interaction

Scope

Impact

ConfidentialityC

IntegrityC

AvailabilityC

AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected Vendors & Products

Apple1 product(s)

iphone os

sqlite1 product(s)

sqlite

Source: NVD CPE · 2 total CPE entries

Exploit & PoC Resources

POC AVAILABLEProof-of-concept code exists

Exploit-DB

Offensive Security exploit database

GitHub PoC Search

Community PoC repositories

Rapid7 / Metasploit

Metasploit module search

PacketStorm

Security advisories & exploits

External links open in a new tab. Always verify in a controlled environment before use.

Official Patches & Advisories

ADVISORYhttp://lists.apple.com/archives/security-announce/2015/Sep/msg00001.html

ADVISORYhttps://support.apple.com/HT205212

ADVISORYhttp://lists.apple.com/archives/security-announce/2015/Sep/msg00001.html

ADVISORYhttps://support.apple.com/HT205212

News & Research Mentioning CVE-2015-5895

ABB B&R Automation Studio

CISA Alerts· May 21, 2026

View CSAF Summary ABB became aware of vulnerability in the product versions listed as affected in the advisory. An update is available that replaces an outdated third-party component. Although no successful exploitation was observed during testing of the affected B&R products, the identified vulnerabilities could present potential attack vectors that might enable unauthorized access, data exposure, or remote code execution. The following versions of ABB B&R Automation Studio are affected: B&R Automation Studio <6.5, 6.5 (CVE-2025-6965, CVE-2025-3277, CVE-2023-7104, CVE-2022-35737, CVE-2020-15358, CVE-2020-13632, CVE-2020-13631, CVE-2020-13630, CVE-2020-13435, CVE-2020-13434, CVE-2020-11656, CVE-2020-11655, CVE-2019-19646, CVE-2019-19645, CVE-2019-845 [xlite_meta score:73 src:CISA Alerts xlite_fp:4bd9915ab1cbc0373abcc9a511995a7eda05ff04b973f92e9ad91fab560f97da]