4801 matches found
Memory corruption
WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than CVE-2015-7048, CVE-2015-7095, CVE-2015-7096,...
CVE-2015-7054
CVE-2015-7054 affects Apple platforms via the zlib component in the Compression subsystem (iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, watchOS before 2.1). The vulnerability arises because memory is not initialized for an unspecified data structure, allowing remote attackers to execute ...
CVE-2015-7072
CVE-2015-7072 affects Apple’s dyld on iOS (pre-9.2), tvOS (pre-9.1), and watchOS (pre-2.1), where segment validation is mishandled. This allows arbitrary code execution in a privileged context via a crafted app. The documented fixes are iOS 9.2+, tvOS 9.1+, and watchOS 2.1+. No exploitation statu...
CVE-2015-7039
Technical details about CVE-2015-7039 are not provided in the supplied connected documents or the Initial Description; monitor for official disclosures and updates.
CVE-2015-7069
Mobile Replayer in GPUTools Framework in Apple iOS before 9.2 allows attackers to execute arbitrary code in a privileged context via an app that provides a crafted pathname, a different vulnerability than CVE-2015-7070...
CVE-2015-7094
CFNetwork HTTPProtocol in Apple iOS before 9.2 and OS X before 10.11.2 allows man-in-the-middle attackers to bypass the HSTS protection mechanism via a crafted URL...
CVE-2015-7069
CVE-2015-7069 affects Apple iOS before 9.2 via the Mobile Replayer in the GPUTools Framework. A crafted pathname permits an attacker to execute arbitrary code in a privileged context. The vulnerability is described as distinct from CVE-2015-7070. The provided documents do not include exploitation...
CVE-2015-7043
The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to cause a denial of service via a crafted app, a different vulnerability than CVE-2015-7040, CVE-2015-7041, and CVE-2015-7042...
CVE-2015-7113
The CVE-2015-7113 issue affects Apple iOS before 9.2 and watchOS before 2.1, targeting the LaunchServices component via a malformed plist. The underlying fault is memory corruption that can allow attackers to execute arbitrary code in a privileged context or cause a denial of service. Impact is d...
CVE-2015-7105
CoreGraphics in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 is vulnerable to crafted font files that can cause memory corruption, enabling remote code execution or a denial of service. The vulnerability affects font parsing in the CoreGraphics component and ...
CVE-2015-7001
AppSandbox in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 mishandles hard links, which allows attackers to bypass Contacts access revocation via a crafted app...
CVE-2015-7099
Technical details about CVE-2015-7099 are not publicly available in the provided documents. No specific affected product versions, root cause, or remediation are disclosed here. Monitor for updates from official advisories.
CVE-2015-7093
Safari in Apple iOS before 9.2 allows remote attackers to spoof a URL in the user interface via a crafted web site...
CVE-2015-7037
Directory traversal vulnerability in Mobile Backup in Photos in Apple iOS before 9.2 allows attackers to read arbitrary files via a crafted pathname...
CVE-2015-7046
The CVE-2015-7046 issue affects Apple’s OS X/iOS/tvOS/watchOS: the Sandbox in xnu does not properly enforce privilege separation, allowing a crafted app with root privileges to bypass ASLR. Affected: iOS prior to 9.2, OS X prior to 10.11.2, tvOS prior to 9.1, watchOS prior to 2.1. Impact stated i...
CVE-2015-7103
Technical details for CVE-2015-7103 are not publicly available in the provided connected/documents. Monitor for updates from official advisories; no confirmed affected products, exploitation status, or remediation details are provided here.
CVE-2015-7102
WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than CVE-2015-7048, CVE-2015-7095, CVE-2015-7096,...
CVE-2015-7070
CVE-2015-7070 concerns Mobile Replayer in the GPUTools Framework on Apple iOS prior to 9.2. The CVE entry describes arbitrary-code execution in a privileged context via an app that provides a crafted pathname. Connected documents corroborate a path-checking vulnerability in Apple iOS Mobile Repla...
CVE-2015-7070
Mobile Replayer in GPUTools Framework in Apple iOS before 9.2 allows attackers to execute arbitrary code in a privileged context via an app that provides a crafted pathname, a different vulnerability than CVE-2015-7069...