CVE-2015-3733

CVE-2015-3733 is a WebKit memory-corruption/remote-code-execution issue present in WebKit as used by Apple iOS prior to 8.4.1 and Safari prior to 6.2.8, 7.x prior to 7.1.8, and 8.x prior to 8.0.8. The root cause is memory corruption triggered by complex crafted web content, which can lead to arbi...

CVE-2015-5766

CVE-2015-5766 concerns Apple iOS prior to 8.4.1, where a directory traversal issue in the Air Traffic component allowed access to arbitrary filesystem locations via vectors related to asset handling. The root cause is a path/asset handling validation weakness within Air Traffic, enabling potentia...

CVE-2015-3737

CVE-2015-3737 affects WebKit (as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8) and allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site (memory corruption and app crash). Public references indicate ...

CVE-2015-3747

CVE-2015-3747 affects WebKit used in Apple iOS (pre-8.4.1) and Safari (pre-6.2.8, 7.x pre-7.1.8, 8.x pre-8.0.8). A crafted website could trigger remote code execution or memory corruption leading to application crash (denial of service). Root cause is memory corruption in WebKit components expose...

CVE-2015-3745

CVE-2015-3745 involves WebKit used in Apple iOS before 8.4.1 and Safari before 6.2.8, and versions 7.x before 7.1.8, 8.x before 8.0.8. The vulnerability allows a remote attacker to run arbitrary code or cause a denial of service through a crafted web site, via memory corruption and application cr...

CVE-2015-3738

WebKit vulnerability in Apple software: remote code execution or memory corruption/DoS via a crafted website. Affected: WebKit as used in iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8. Root cause described as memory corruption leading to app crash; no remediatio...

CVE-2015-3763

CVE-2015-3763 affects Safari/WebKit on iOS prior to 8.4.1. A crafted webpage can generate numerous JavaScript alert messages, causing a denial of service (apparent browser lock). Apple addressed this in iOS 8.4.1 by throttling alerts. The referenced entry describes a remote, client-side DoS via a...

CVE-2015-5749

The CVE-2015-5749 issue affects Apple iOS prior to 8.4.1, where the Sandbox_profiles component (and CFPreferences under the third‑party app sandbox) could be bypassed by a crafted app to read arbitrary managed preferences. Apple and ThreatPost describe an in enterprise context where MDM‑provided ...

CVE-2015-3784

CVE-2015-3784 affects Apple’s Office Viewer in iOS versions before 8.4.1 and OS X versions before 10.10.5. The issue arises from an XML External Entity (XXE) vulnerability where an external entity declaration, combined with an entity reference, enables a remote attacker to read arbitrary files vi...

CVE-2015-5766

Directory traversal vulnerability in Air Traffic in Apple iOS before 8.4.1 allows attackers to access arbitrary filesystem locations via vectors related to asset handling...

CVE-2015-3734

CVE-2015-3734 concerns WebKit as used in Apple iOS prior to 8.4.1 and Safari prior to 6.2.8, 7.x prior to 7.1.8, and 8.x prior to 8.0.8. A crafted web page can cause remote code execution or a denial of service via memory corruption, potentially crashing the affected application. The initial desc...

CVE-2015-3736

WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVE...

CVE-2015-3739

WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVE...

CVE-2015-5778

CVE-2015-5778 is an Apple CoreMedia Playback memory corruption vulnerability. The description states that, on iOS versions prior to 8.4.1 and OS X prior to 10.10.5, a crafted movie file can cause memory corruption leading to remote code execution or a denial of service. The connected material con...

CVE-2015-3730

CVE-2015-3730 is a WebKit vulnerability that allowed remote code execution or memory-corruption-induced denial of service via a crafted web site. It affected WebKit-based components in Apple products (iOS and Safari) across multiple versions (as cited in the initial doc). Connected advisories con...

CVE-2015-3756

The Certificate UI in Apple iOS before 8.4.1 does not prevent X.509 certificate acceptance within the lock screen, which allows physically proximate attackers to establish arbitrary certificate trust relationships by completing a dialog...

CVE-2015-3732

WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVE...

CVE-2015-3738

WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVE...

CVE-2015-5746

AppleFileConduit in Apple iOS before 8.4.1 allows attackers to bypass intended restrictions on filesystem access via an afc command that leverages symlink mishandling...

CVE-2015-3740

WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVE...