Design/Logic Flaw

The OCSP client in Apple iOS before 9.1 does not check for certificate expiry, which allows remote attackers to spoof a valid certificate by leveraging access to a revoked certificate...

CVE-2015-6982

WebKit, as used in Apple iOS before 9.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-10-21-1...

Memory corruption

WebKit, as used in Apple iOS before 9.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-10-21-1...

Memory corruption

WebKit, as used in Apple iOS before 9.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-10-21-1...

Memory corruption

CoreText in Apple iOS before 9.1, OS X before 10.11.1, and iTunes before 12.3.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font file, a different vulnerability than CVE-2015-6975 and CVE-2015-7017...

CVE-2015-6979

GasGauge in Apple iOS before 9.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

CVE-2015-6999

Affected software: Apple iOS prior to 9.1. The OCSP client fails to check certificate expiry, allowing a revoked certificate to appear valid and enabling remote spoofing of certificates. Root cause: OCSP expiry check not performed. Impact: potential trust compromise and spoofed TLS certificates. ...

CVE-2015-7022

The Telephony subsystem in Apple iOS before 9.1 allows attackers to obtain sensitive call-status information via a crafted app...

CVE-2015-6992

The CVE-2015-6992 issue affects Apple CoreText across iOS, OS X, and iTunes: a crafted font file can cause memory corruption leading to remote code execution or denial of service. Affected versions include iOS prior to 9.1, OS X prior to 10.11.1, and iTunes prior to 12.3.1. Connected records (e.g...

CVE-2015-6975

CoreText in Apple iOS before 9.1, OS X before 10.11.1, and iTunes before 12.3.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font file, a different vulnerability than CVE-2015-6992 and CVE-2015-7017...

CVE-2015-6986

com.apple.driver.AppleVXD393 in the Graphics Driver subsystem in Apple iOS before 9.1 allows attackers to execute arbitrary code via a crafted app that leverages an unspecified "type confusion."...

CVE-2015-7000

Notification Center in Apple iOS before 9.1 mishandles changes to "Show on Lock Screen" settings, which allows physically proximate attackers to obtain sensitive information by looking for a 1 Phone or 2 Messages notification on the lock screen soon after a setting was disabled...

CVE-2015-7005

WebKit in Apple iOS before 9.1 is affected by CVE-2015-7005: memory corruption in WebKit could allow remote attackers to execute arbitrary code or cause a denial of service via a crafted website. Affected product/area: WebKit as used in iOS prior to 9.1; root cause: memory corruption in WebKit co...

CVE-2015-7004

The kernel in Apple iOS before 9.1 allows attackers to cause a denial of service via a crafted app...

CVE-2015-6982

WebKit in Apple iOS prior to 9.1 is affected by CVE-2015-6982. A crafted website may allow remote code execution or memory corruption leading to a crash, via WebKit components. The vulnerability is evidenced by multiple CVE references in the iOS WebKit/WebKit stack; the public descriptions consis...

CVE-2015-6981

WebKit, as used in Apple iOS before 9.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-10-21-1...

CVE-2015-6999

The OCSP client in Apple iOS before 9.1 does not check for certificate expiry, which allows remote attackers to spoof a valid certificate by leveraging access to a revoked certificate...

PT-2015-7443

FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font file, a different vulnerability than CVE-2015-6976, CVE-2015-6977, CVE-2015-6978, CVE-2015-6990, CVE-2015-6991,...

CVE-2015-7017: Improper Restriction of Operations within the Bounds of a Memory Buffer

CoreText in Apple iOS before 9.1, OS X before 10.11.1, and iTunes before 12.3.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font file, a different vulnerability than CVE-2015-6975 and CVE-2015-6992...

PT-2015-7077

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.1 Apple OS X versions prior to 10.11.1 Apple watchOS versions prior to 2.0.1 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service due to memory corruption via a...