PT-2015-2968

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.2 Apple OS X versions prior to 10.11.2 Apple tvOS versions prior to 9.1 Apple watchOS versions prior to 2.1 Description The issue is related to errors in pointer dereferencing in the IOKit SCSI component of the...

PT-2015-2930

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.2 Apple OS X versions prior to 10.11.2 Apple tvOS versions prior to 9.1 Apple watchOS versions prior to 2.1 Description The issue allows local users to gain privileges or cause a denial of service due to memory...

PT-2015-2924

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.2 Apple OS X versions prior to 10.11.2 Apple tvOS versions prior to 9.1 Apple watchOS versions prior to 2.1 Description The issue allows attackers to execute arbitrary code in a privileged context or cause a denia...

PT-2015-3128

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.2 Apple OS X versions prior to 10.11.2 Apple tvOS versions prior to 9.1 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a malformed media...

PT-2015-7473

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.2 Apple OS X versions prior to 10.11.2 Description The issue allows man-in-the-middle attackers to bypass the HSTS protection mechanism via a crafted URL, specifically affecting the CFNetwork HTTPProtocol...

CVE-2015-7072: Improper Input Validation

dyld in Apple iOS before 9.2, tvOS before 9.1, and watchOS before 2.1 mishandles segment validation, which allows attackers to execute arbitrary code in a privileged context via a crafted app...

PT-2015-3144

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.2 Apple OS X versions prior to 10.11.2 Apple tvOS versions prior to 9.1 Apple watchOS versions prior to 2.1 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service memo...

PT-2015-3099

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.2 Apple OS X versions prior to 10.11.2 Apple tvOS versions prior to 9.1 Apple watchOS versions prior to 2.1 Description The issue is related to the mishandling of hard links by the AppSandbox component in Apple...

PT-2015-3132

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.2 Apple OS X versions prior to 10.11.2 Description The issue is related to an XML External Entity XXE problem, where an incorrect restriction of XML links to external objects allows a remote attacker to read...

PT-2015-2929

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.2 Apple OS X versions prior to 10.11.2 Apple tvOS versions prior to 9.1 Apple watchOS versions prior to 2.1 Description The issue allows local users to gain privileges or cause a denial of service due to memory...

PT-2015-3129

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.2 Apple OS X versions prior to 10.11.2 Apple tvOS versions prior to 9.1 Apple watchOS versions prior to 2.1 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service memo...

PT-2015-3102

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.2 Apple OS X versions prior to 10.11.2 Apple tvOS versions prior to 9.1 Apple watchOS versions prior to 2.1 Description The issue is caused by a buffer overflow in the libc component of the operating systems, whic...

PT-2015-3113

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.2 Apple tvOS versions prior to 9.1 Description The issue is related to the MobileStorageMounter component, which mishandles the timing of trust-cache loading. This allows attackers to execute arbitrary code in a...

PT-2015-3116

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.2 Apple OS X versions prior to 10.11.2 Apple tvOS versions prior to 9.1 Apple watchOS versions prior to 2.1 Description The issue is related to the zlib component in the Compression module, which fails to initiali...

CVE-2015-7079: Improper Input Validation

dyld in Apple iOS before 9.2 and tvOS before 9.1 mishandles segment validation, which allows attackers to execute arbitrary code in a privileged context via a crafted app...

CVE-2015-7083: Improper Restriction of Operations within the Bounds of a Memory Buffer

The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to gain privileges or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2015-7084...

CVE-2015-7093: Improper Input Validation

Safari in Apple iOS before 9.2 allows remote attackers to spoof a URL in the user interface via a crafted web site...

CVE-2015-7040: Undefined Security Weakness

The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to cause a denial of service via a crafted app, a different vulnerability than CVE-2015-7041, CVE-2015-7042, and CVE-2015-7043...

CVE-2015-7070: Undefined Security Weakness

Mobile Replayer in GPUTools Framework in Apple iOS before 9.2 allows attackers to execute arbitrary code in a privileged context via an app that provides a crafted pathname, a different vulnerability than CVE-2015-7069...

CVE-2015-7038: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in libc in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code via a crafted package, a different vulnerability than CVE-2015-7039...