CVE-2015-7012

WebKit, as used in Apple iOS before 9.1, Safari before 9.0.1, and iTunes before 12.3.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in...

CVE-2015-5930

CVE-2015-5930 concerns WebKit as used in: Apple iOS prior to 9.1, Safari prior to 9.0.1, and iTunes prior to 12.3.1. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. The description i...

CVE-2015-7006

CVE-2015-7006 is a directory traversal vulnerability in Apple's BOM handling (CPIO archive parsing) affecting iOS <9.1, OS X <10.11.1, and watchOS

CVE-2015-5928

WebKit, as used in Apple iOS before 9.1, Safari before 9.0.1, and iTunes before 12.3.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in...

CVE-2015-5930

WebKit, as used in Apple iOS before 9.1, Safari before 9.0.1, and iTunes before 12.3.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in...

CVE-2015-7014

CVE-2015-7014 affects WebKit used in Apple iOS (pre-9.1), Safari (pre-9.0.1), and iTunes (pre-12.3.1). A crafted web site can cause remote code execution or a denial of service due to memory corruption, potentially crashing the application. Root cause details and affected versions are stated; no ...

CVE-2015-7002

CVE-2015-7002 affects WebKit as used in Apple iOS prior to 9.1, Safari prior to 9.0.1, and iTunes prior to 12.3.1, allowing remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. The connected sources confirm this ...

CVE-2015-5929

WebKit, as used in Apple iOS before 9.1, Safari before 9.0.1, and iTunes before 12.3.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in...

CVE-2015-5928

CVE-2015-5928 affects WebKit as used in Apple iOS before 9.1, Safari before 9.0.1, and iTunes before 12.3.1. A crafted web site can cause remote code execution or a denial of service through memory corruption. The connected advisories indicate this vulnerability was addressed in downstream WebKit...

CVE-2015-7022

The Telephony subsystem in Apple iOS before 9.1 allows attackers to obtain sensitive call-status information via a crafted app...

CVE-2015-7005

WebKit, as used in Apple iOS before 9.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-10-21-1...

CVE-2015-7004

The kernel in Apple iOS before 9.1 allows attackers to cause a denial of service via a crafted app...

CVE-2015-6997

The X.509 certificate-trust implementation in Apple iOS before 9.1 does not recognize that the kSecRevocationRequirePositiveResponse flag implies a revocation-checking requirement, which makes it easier for man-in-the-middle attackers to spoof endpoints by leveraging access to a revoked certifica...

Code injection

The kernel in Apple iOS before 9.1 allows attackers to cause a denial of service via a crafted app...

Memory corruption

WebKit, as used in Apple iOS before 9.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-10-21-1...

Code injection

The Telephony subsystem in Apple iOS before 9.1 allows attackers to obtain sensitive call-status information via a crafted app...

Memory corruption

CoreText in Apple iOS before 9.1, OS X before 10.11.1, and iTunes before 12.3.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font file, a different vulnerability than CVE-2015-6975 and CVE-2015-7017...

Type confusion

com.apple.driver.AppleVXD393 in the Graphics Driver subsystem in Apple iOS before 9.1 allows attackers to execute arbitrary code via a crafted app that leverages an unspecified "type confusion."...

Memory corruption

GasGauge in Apple iOS before 9.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

CVE-2015-6981

WebKit, as used in Apple iOS before 9.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-10-21-1...