CVE-2015-5843

IOMobileFrameBuffer in Apple iOS before 9 allows local users to gain privileges or cause a denial of service memory corruption via unspecified vectors...

CVE-2015-5867

IOHIDFamily in Apple iOS before 9 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

CVE-2015-5868

The kernel in Apple iOS before 9 allows local users to gain privileges or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2015-5896 and CVE-2015-5903...

CVE-2015-5898

CFNetwork in Apple iOS before 9 relies on the hardware UID for its cache encryption key, which makes it easier for physically proximate attackers to obtain sensitive information by obtaining this UID...

CVE-2015-3801

CVE-2015-3801 affects Apple iOS WebKit’s CFNetwork Cookies: the document.cookie API could be used to bypass a single-cookie restriction in WebKit’s cookie handling, prior to iOS 9. The issue originates in CFNetwork Cookies (WebKit) and is exploitable via unspecified vectors over the network. The ...

CVE-2015-5840

CVE-2015-5840 affects Apple iOS (pre-9) with the removefile( ) checkint division routines. The root cause is an overflow fault in the division routines used by removefile’s data processing, allowing a crafted input to trigger a denial-of-service (app crash). Connected docs corroborate the same is...

CVE-2015-5764

CVE-2015-5764 is a Safari UI spoofing vulnerability in iOS prior to iOS 9. The issue allows a remote attacker to spoof displayed URLs via unspecified vectors, enabling potential phishing-type deception. The CVE is listed among Safari 9 updates (Apple SA 2015-09-30-2) and Apple advises updating to...

CVE-2015-5839

dyld in Apple iOS before 9 allows attackers to bypass a code-signing protection mechanism via an app that places a crafted signature in an executable file...

CVE-2015-5792

CVE-2015-5792 affects WebKit as used in Apple iOS prior to 9 and iTunes prior to 12.3. The vulnerability arises from WebKit’s handling of crafted web content, enabling remote attackers to execute arbitrary code or cause memory corruption and application crashes. Affected component: WebKit (Apple ...

CVE-2015-5896

CVE-2015-5896 is a kernel memory-corruption vulnerability in Apple iOS prior to iOS 9 that enables local privilege escalation or memory corruption via unspecified vectors. The vulnerability is listed among iOS/Kernel CVEs and is addressed by updating to iOS 9, per Apple’s advisory. Connected docu...

CVE-2015-5863

IOStorageFamily in Apple iOS before 9 does not properly initialize an unspecified data structure, which allows local users to obtain sensitive information from kernel memory via unknown vectors...

CVE-2015-5789

CVE-2015-5789 affects WebKit used in Apple iOS before 9 and iTunes before 12.3. A crafted web site can remotely execute arbitrary code or cause a denial of service due to memory corruption leading to an application crash. The vulnerability is tied to WebKit’s handling of content (no specific comp...

CVE-2014-8611

CVE-2014-8611 : The __sflush function in fflush.c (stdio in libc) on FreeBSD 10.1 and the kernel in Apple iOS prior to 9 mishandles failures of the write(2) system call, allowing context-dependent attackers to execute arbitrary code or cause a heap-based buffer overflow via a crafted application....

CVE-2015-5829

CVE-2015-5829 affects Apple iOS, specifically the Data Detectors Engine . The vulnerability is a memory corruption issue in the processing of crafted text files, which could allow remote attackers to execute arbitrary code or cause a denial of service. Public references in the connected corpus co...

CVE-2015-5860

CVE-2015-5860 affects the CFNetwork HTTPProtocol component in Apple iOS prior to 9. The root cause is a mishandling of HSTS state, which allows a remote attacker to bypass Safari private-browsing protections and track users via a crafted website. The vulnerability impact is described in the CVE e...

CVE-2015-5898

CVE-2015-5898 affects CFNetwork in Apple iOS before 9. The issue: CFNetwork caches data using a key protected only by the hardware UID, enabling physically proximate attackers to access cached information. The root cause is the cache encryption key being derived from the hardware UID alone. Impac...

CVE-2015-5906

The CVE-2015-5906 issue affects WebKit in Apple iOS up to version 9, where the password input context handling allowed QuickType to infer the last character of a password. This is a WebKit input-context vulnerability that could aid password disclosure. The concrete detail is that the vulnerabilit...

CVE-2015-5844

CVE-2015-5844 affects the IOKit kernel component on Apple iOS (pre-iOS 9). The issue is a memory corruption in the kernel that can allow a crafted app to execute arbitrary code with system privileges or cause a denial of service. Affected products include iOS devices running versions prior to 9; ...

CVE-2015-5882

The processorsettasks API implementation in Apple iOS before 9 allows local users to bypass an entitlement protection mechanism and obtain access to the task ports of arbitrary processes by leveraging root privileges...

CVE-2015-5838

SpringBoard in Apple iOS before 9 does not properly restrict access to privileged API calls, which allows attackers to spoof the dialog windows of an arbitrary app via a crafted app...