CVE-2015-7023

CVE-2015-7023 affects CFNetwork in iOS and macOS. The root cause is a failure to consistently apply uppercase vs lowercase when parsing cookies, enabling a remote server to overwrite cookies via unspecified vectors. The vulnerability is described as allowing cookies to be overwritten by different...

CVE-2015-7006

CVE-2015-7006 is a directory traversal vulnerability in Apple's BOM handling (CPIO archive parsing) affecting iOS <9.1, OS X <10.11.1, and watchOS

CVE-2015-7012

CVE-2015-7012 relates to WebKit used in Apple iOS prior to 9.1, Safari prior to 9.0.1, and iTunes prior to 12.3.1. The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site due to a memory corruption vulnerability in WebKit. Connected sources ...

CVE-2015-7002

CVE-2015-7002 affects WebKit as used in Apple iOS prior to 9.1, Safari prior to 9.0.1, and iTunes prior to 12.3.1, allowing remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. The connected sources confirm this ...

CVE-2015-5936

CVE-2015-5936 affects ImageIO in Apple iOS < 9.1, OS X < 10.11.1, and watchOS

CVE-2015-7014

CVE-2015-7014 affects WebKit used in Apple iOS (pre-9.1), Safari (pre-9.0.1), and iTunes (pre-12.3.1). A crafted web site can cause remote code execution or a denial of service due to memory corruption, potentially crashing the application. Root cause details and affected versions are stated; no ...

EUVD-2015-6927

The Disk Images component in Apple iOS before 9.1 and OS X before 10.11.1 misparses images, which allows attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted app...

CVE-2015-7015

Heap-based buffer overflow in the DNS client library in configd in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows attackers to execute arbitrary code via a crafted app that sends a spoofed configd response to a client...

CVE-2015-5930

WebKit, as used in Apple iOS before 9.1, Safari before 9.0.1, and iTunes before 12.3.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in...

CVE-2015-7012

WebKit, as used in Apple iOS before 9.1, Safari before 9.0.1, and iTunes before 12.3.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in...

CVE-2015-7009

FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font file, a different vulnerability than CVE-2015-6976, CVE-2015-6977, CVE-2015-6978, CVE-2015-6990, CVE-2015-6991,...

CVE-2015-7006

Directory traversal vulnerability in the BOM aka Bill of Materials component in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code via a crafted CPIO archive...

CVE-2015-6976

Technical details for CVE-2015-6976 are not publicly available in the provided documents; monitor for updates.

CVE-2015-7015

CVE-2015-7015 is a heap-based buffer overflow in the DNS client library of configd that affects Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1. An attacker could exploit a crafted configd response to execute arbitrary code on a vulnerable device. Public-connected documents co...

CVE-2015-7010

Technical details for CVE-2015-7010 are not publicly available in the provided connected documents; monitor for updates.

CVE-2015-5930

CVE-2015-5930 concerns WebKit as used in: Apple iOS prior to 9.1, Safari prior to 9.0.1, and iTunes prior to 12.3.1. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. The description i...

CVE-2015-7018

Technical details about CVE-2015-7018 are not publicly available in the provided connected documents; monitor for updates from official advisories.

CVE-2015-6976

FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font file, a different vulnerability than CVE-2015-6977, CVE-2015-6978, CVE-2015-6990, CVE-2015-6991, CVE-2015-6993,...

CVE-2015-7002

WebKit, as used in Apple iOS before 9.1, Safari before 9.0.1, and iTunes before 12.3.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in...

CVE-2015-6993

FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font file, a different vulnerability than CVE-2015-6976, CVE-2015-6977, CVE-2015-6978, CVE-2015-6990, CVE-2015-6991,...