CVE-2015-7095

Technical details about CVE-2015-7095 are not publicly available in the provided documents. Monitor for updates.

CVE-2015-7072

CVE-2015-7072 affects Apple’s dyld on iOS (pre-9.2), tvOS (pre-9.1), and watchOS (pre-2.1), where segment validation is mishandled. This allows arbitrary code execution in a privileged context via a crafted app. The documented fixes are iOS 9.2+, tvOS 9.1+, and watchOS 2.1+. No exploitation statu...

CVE-2015-7097

WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than CVE-2015-7048, CVE-2015-7095, CVE-2015-7096,...

CVE-2015-7113

The CVE-2015-7113 issue affects Apple iOS before 9.2 and watchOS before 2.1, targeting the LaunchServices component via a malformed plist. The underlying fault is memory corruption that can allow attackers to execute arbitrary code in a privileged context or cause a denial of service. Impact is d...

CVE-2015-7097

Technical details for CVE-2015-7097 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2015-7001

AppSandbox in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 mishandles hard links, which allows attackers to bypass Contacts access revocation via a crafted app...

CVE-2015-7043

The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to cause a denial of service via a crafted app, a different vulnerability than CVE-2015-7040, CVE-2015-7041, and CVE-2015-7042...

CVE-2015-7099

Technical details about CVE-2015-7099 are not publicly available in the provided documents. No specific affected product versions, root cause, or remediation are disclosed here. Monitor for updates from official advisories.

CVE-2015-7070

CVE-2015-7070 concerns Mobile Replayer in the GPUTools Framework on Apple iOS prior to 9.2. The CVE entry describes arbitrary-code execution in a privileged context via an app that provides a crafted pathname. Connected documents corroborate a path-checking vulnerability in Apple iOS Mobile Repla...

CVE-2015-7050

WebKit in Apple iOS before 9.2 and Safari before 9.0.2 misparses content extensions, which allows remote attackers to obtain sensitive browsing-history information via a crafted web site...

CVE-2015-7048

WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than CVE-2015-7095, CVE-2015-7096, CVE-2015-7097,...

CVE-2015-7101

Technical details for CVE-2015-7101 are not publicly available in the provided documents. Monitor for updates.

CVE-2015-7046

The CVE-2015-7046 issue affects Apple’s OS X/iOS/tvOS/watchOS: the Sandbox in xnu does not properly enforce privilege separation, allowing a crafted app with root privileges to bypass ASLR. Affected: iOS prior to 9.2, OS X prior to 10.11.2, tvOS prior to 9.1, watchOS prior to 2.1. Impact stated i...

CVE-2015-7095

WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than CVE-2015-7048, CVE-2015-7096, CVE-2015-7097,...

CVE-2015-7102

WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than CVE-2015-7048, CVE-2015-7095, CVE-2015-7096,...

CVE-2015-7070

Mobile Replayer in GPUTools Framework in Apple iOS before 9.2 allows attackers to execute arbitrary code in a privileged context via an app that provides a crafted pathname, a different vulnerability than CVE-2015-7069...

CVE-2015-7096

CVE-2015-7096 affects WebKit components in Apple iOS prior to 9.2, Safari prior to 9.0.2, and tvOS prior to 9.1. A crafted web site could cause remote code execution or a memory corruption crash, potentially leading to an application crash or denial of service. The vulnerability is distinct from ...

CVE-2015-7098

Technical details for CVE-2015-7098 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2015-7098

WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than CVE-2015-7048, CVE-2015-7095, CVE-2015-7096,...

CVE-2015-7103

Technical details for CVE-2015-7103 are not publicly available in the provided connected/documents. Monitor for updates from official advisories; no confirmed affected products, exploitation status, or remediation details are provided here.