CVE-2015-5820

CVE-2015-5820 affects WebKit in Apple iOS prior to iOS 9. A crafted tel://, facetime://, or facetime-audio:// URL can trigger a dialing action, enabling remote dialing via web content. The documentation specifies the vulnerability arises from WebKit/URL handling; exploits or in‑the‑wild details a...

CVE-2015-5896

CVE-2015-5896 is a kernel memory-corruption vulnerability in Apple iOS prior to iOS 9 that enables local privilege escalation or memory corruption via unspecified vectors. The vulnerability is listed among iOS/Kernel CVEs and is addressed by updating to iOS 9, per Apple’s advisory. Connected docu...

CVE-2015-5855

CVE-2015-5855 affects Apple iOS (pre‑9.0). A crafted Game Center app can disclose a player’s e‑mail address due to how Game Center handles user emails. Impact: information disclosure. Remediation: update to iOS 9 or later.

CVE-2015-5824

CVE-2015-5824 affects CFNetwork SSL in Apple’s software stack (NSURL) on iOS before 9, where certificate verification fails after a certificate change. This enables man-in-the-middle attackers in privileged network positions to spoof servers and obtain data. Root cause: improper validation of X.5...

CVE-2015-5823

CVE-2015-5823 affects WebKit/JavaScriptCore as used in Apple iOS prior to 9 and iTunes prior to 12.3. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. The provided connected documents...

CVE-2015-5851

CVE-2015-5851 affects Apple iOS Multipeer Connectivity. The issue: the convenience initializer could downgrade an encrypted session to unencrypted, enabling a local attacker to observe cleartext multipeer data. Affected product/version: iOS before 9. The root cause, per the vulnerability content,...

CVE-2015-5850

AppleKeyStore in iOS before 9 is vulnerable: local attackers who have physical access can reset the count of failed passcode attempts via a device backup, effectively weakening the passcode protection. The underlying issue is in the passcode failure logic when handling backups, enabling a restora...

CVE-2015-5791

CVE-2015-5791 affects WebKit/JavaScriptCore in Apple iOS before 9 and iTunes before 12.3. A crafted webpage could remotely execute arbitrary code or cause a memory corruption and crash. The connected documents do not specify patch versions or available mitigations; exploitation details are not pr...

CVE-2015-5882

The processorsettasks API implementation in Apple iOS before 9 allows local users to bypass an entitlement protection mechanism and obtain access to the task ports of arbitrary processes by leveraging root privileges...

CVE-2015-5874

CoreText in Apple iOS before 9 and iTunes before 12.3 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font file...

CVE-2015-5907

WebKit in Apple iOS before 9 allows man-in-the-middle attackers to conduct redirection attacks by leveraging the mishandling of the resource cache of an SSL web site with an invalid X.509 certificate...

CVE-2015-5829

CVE-2015-5829 affects Apple iOS, specifically the Data Detectors Engine . The vulnerability is a memory corruption issue in the processing of crafted text files, which could allow remote attackers to execute arbitrary code or cause a denial of service. Public references in the connected corpus co...

CVE-2015-5806

CVE-2015-5806 affects WebKit as used in Apple iOS before 9 and iTunes before 12.3. A crafted web site can trigger a memory corruption that may allow remote code execution or cause a denial of service (application crash). The vulnerability is tied to WebKit’s handling of certain content, with the ...

CVE-2015-5863

IOStorageFamily in Apple iOS before 9 does not properly initialize an unspecified data structure, which allows local users to obtain sensitive information from kernel memory via unknown vectors...

CVE-2015-5896

The kernel in Apple iOS before 9 allows local users to gain privileges or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2015-5868 and CVE-2015-5903...

CVE-2015-5797

CVE-2015-5797 affects WebKit as used in Apple iOS before 9 and iTunes before 12.3. The vulnerability arises from a memory corruption flaw in WebKit that can be triggered by a crafted web site, enabling remote code execution or causing a denial of service (application crash). The available connect...

CVE-2015-5807

CVE-2015-5807 affects WebKit as used in Apple iOS prior to iOS 9 and iTunes prior to 12.3. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. The description notes this is a different v...

CVE-2015-5846

CVE-2015-5846 is listed as a kernel memory corruption in IOKit affecting Apple iOS. The vulnerability allows a crafted app to execute arbitrary code with system privileges or cause memory corruption leading to a denial of service. Connected advisories map this CVE to the iOS kernel/IOKit memory h...

CVE-2015-5825

CVE-2015-5825 is associated with WebKit/Safari (iOS

CVE-2015-5794

CVE-2015-5794 refers to a WebKit vulnerability affecting Apple iOS prior to 9 and iTunes prior to 12.3. A crafted web site can cause memory corruption, allowing remote attackers to execute arbitrary code or cause a denial of service (application crash). This is described as a distinct vulnerabili...