CVE-2015-3710
No fix known EPSS 2%
Mail in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to trigger a refresh operation, and consequently cause a visit to an arbitrary web site, via a crafted HTML e-mail message.
Products: apple iphone_os, apple mac_os_x