Which products and versions are affected by CVE-2015-3783?

Affected: Mac OS X (Apple). The full list is in the CVE brief.

Is CVE-2015-3783 being exploited in the wild?

It is not listed in any known-exploited vulnerabilities catalog.

Is CVE-2015-3783 in the CISA KEV catalog?

No, it is not currently listed in the CISA Known Exploited Vulnerabilities catalog.

Is there a public exploit for CVE-2015-3783?

Public exploit code is available.

Is there a fix for CVE-2015-3783?

Fixed versions are available, including Mac OS X 10.10.4.

How urgently should CVE-2015-3783 be patched?

Brandefense priority: patch immediately, because public exploit code exists for a high-severity flaw.

Request A Demo

WatchlistHigh

CVE-2015-3783Mac OS X Memory Corruption

SceneKit in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via unspecified vectors.

Published Aug 16, 2015 · Updated May 6, 2026

Key Facts

Patch immediately

CVE-2015-3783 is a high-severity vulnerability (CVSS 7.5 v2) affecting Mac OS X (Apple).
It is not listed in any known-exploited vulnerabilities catalog. Public exploit code is available.
EPSS estimates a 36% probability of exploitation in the next 30 days.
Fixed versions are available, including Mac OS X 10.10.4.
Brandefense priority: patch immediately, because public exploit code exists for a high-severity flaw.

Scores

CVSS v2

7.5

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS (30-day exploit likelihood)

36%

Higher than 98.4% of all scored CVEs

Exploit maturity

Proof of concept

ATLAS score

38/100

Publication score, see How it works

Exploitation Verdict

KEV listed

Not listed

Federal due date

None

No federal due date

Ransomware use

Not reported

Attributed actors

None named

Exploit & Defence Guidance

Exploit maturity

Proof of concept

Public exploit code

Proof-of-concept links

In-the-wild evidence

Reports of active use

Advisories And Exploit References

advisoryAPPLE-SA-2015-08-13-2
advisoryhttps://support.apple.com/kb/HT205031

Description

SceneKit in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via unspecified vectors.

Affected Products

1 affected entries in total

Product	Affected versions	Fixed in
Mac OS XApple	See advisory	10.10.4

Patched Releases

Mac OS X

10.10.4

Timeline

Publicly disclosed
Aug 16, 2015
Last updated
May 6, 2026

Weakness Type

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

References

1 more references in the full CVE brief

FAQ

Common Questions.

SceneKit in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via unspecified vectors.
Affected: Mac OS X (Apple). The full list is in the CVE brief.
It is not listed in any known-exploited vulnerabilities catalog.
No, it is not currently listed in the CISA Known Exploited Vulnerabilities catalog.
Public exploit code is available.
Fixed versions are available, including Mac OS X 10.10.4.
Brandefense priority: patch immediately, because public exploit code exists for a high-severity flaw.

Is CVE-2015-3783 On Your Attack Surface?

Brandefense matches it against the products discovered on your perimeter and opens a finding the day a CVE like this is listed.