Apple · Safari · CVE-2015-5780
**Name of the Vulnerable Software and Affected Versions**
Apple Safari versions prior to 9
**Description**
The issue is related to the Safari Extensions implementation, which does not require user confirmation before replacing an installed extension. This has an unspecified impact and attack vectors. The vulnerability can be exploited by a remote attacker to affect the security of information.
**Recommendations**
For Apple Safari versions prior to 9, update to version 9 or later to resolve the issue.