CVE-2015-7037

Apple iOS before 9.2 is affected by a directory traversal in Mobile Backup within Photos, allowing an attacker to read arbitrary files via a crafted pathname. Affected product: iOS’s Mobile Backup feature. Root cause: improper handling of crafted pathnames leading to traversal. Impact: read acces...

CVE-2015-7098

Technical details for CVE-2015-7098 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2015-7048

Technical details for CVE-2015-7048 are not publicly available in the provided documents. Monitor for updates from official advisories and the connected EUVD entries.

CVE-2015-7048

WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than CVE-2015-7095, CVE-2015-7096, CVE-2015-7097,...

CVE-2015-7050

WebKit in Apple iOS before 9.2 and Safari before 9.0.2 misparses content extensions, which allows remote attackers to obtain sensitive browsing-history information via a crafted web site...

CVE-2015-7095

WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than CVE-2015-7048, CVE-2015-7096, CVE-2015-7097,...

CVE-2015-7097

WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than CVE-2015-7048, CVE-2015-7095, CVE-2015-7096,...

CVE-2015-7096

WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than CVE-2015-7048, CVE-2015-7095, CVE-2015-7097,...

CVE-2015-7098

WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than CVE-2015-7048, CVE-2015-7095, CVE-2015-7096,...

CVE-2015-7097

Technical details for CVE-2015-7097 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2015-7095

Technical details about CVE-2015-7095 are not publicly available in the provided documents. Monitor for updates.

CVE-2015-7096

CVE-2015-7096 affects WebKit components in Apple iOS prior to 9.2, Safari prior to 9.0.2, and tvOS prior to 9.1. A crafted web site could cause remote code execution or a memory corruption crash, potentially leading to an application crash or denial of service. The vulnerability is distinct from ...

CVE-2015-7101

Technical details for CVE-2015-7101 are not publicly available in the provided documents. Monitor for updates.

PT-2015-3126

Name of the Vulnerable Software and Affected Versions dyld in Apple iOS versions prior to 9.2 dyld in Apple tvOS versions prior to 9.1 dyld in Apple watchOS versions prior to 2.1 Description The issue exists due to insufficient input validation in the dyld component of the iOS operating system...

CVE-2015-7101: Improper Restriction of Operations within the Bounds of a Memory Buffer

WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than CVE-2015-7048, CVE-2015-7095, CVE-2015-7096,...

PT-2015-3127

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.2 OS X versions prior to 10.11.2 tvOS versions prior to 9.1 watchOS versions prior to 2.1 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory...

PT-2015-3117

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.2 Apple OS X versions prior to 10.11.2 Apple tvOS versions prior to 9.1 Description The issue is related to improper validation of keychain item Access Control Lists ACLs, which can be exploited by attackers using...

PT-2015-3122

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.2 Apple OS X versions prior to 10.11.2 Apple tvOS versions prior to 9.1 Apple watchOS versions prior to 2.1 Description The issue is caused by a buffer overflow in the OpenGL component, allowing remote attackers t...

CVE-2015-7047: Improper Input Validation

The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to gain privileges via a crafted mach message that is misparsed...

PT-2015-3145

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.2 Apple OS X versions prior to 10.11.2 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service due to memory corruption via a crafted iWork file. This is caused by a...