CVE-2015-5834

IOAcceleratorFamily in Apple iOS before 9 allows attackers to obtain sensitive kernel memory-layout information via a crafted app...

CVE-2015-5857

Mail in Apple iOS before 9 allows remote attackers to use an address-book contact as a spoofed e-mail sender address via unspecified vectors...

CVE-2015-5791

WebKit, as used in JavaScriptCore in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in...

CVE-2015-5862

The Audio component in Apple iOS before 9 allows remote attackers to cause a denial of service memory corruption and application crash via a crafted audio file...

CVE-2015-5857

The CVE-2015-5857 vulnerability affects Apple iOS Mail prior to iOS 9, where an attacker could spoof the sender by abusing a contact in the address book via unspecified vectors. Root cause is in the Mail sender/address handling logic that allowed spoofed from addresses. Impact is spoofed emails a...

CVE-2015-5855

Apple iOS before 9 allows attackers to discover the e-mail address of a player via a crafted Game Center app...

CVE-2015-5812

WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...

CVE-2015-5804

WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...

CVE-2015-5806

WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...

CVE-2015-5823

CVE-2015-5823 affects WebKit/JavaScriptCore as used in Apple iOS prior to 9 and iTunes prior to 12.3. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. The provided connected documents...

CVE-2015-5806

CVE-2015-5806 affects WebKit as used in Apple iOS before 9 and iTunes before 12.3. A crafted web site can trigger a memory corruption that may allow remote code execution or cause a denial of service (application crash). The vulnerability is tied to WebKit’s handling of certain content, with the ...

CVE-2015-5816

The CVE-2015-5816 entry concerns WebKit/JavaScriptCore as used in Apple iOS prior to 9 and iTunes prior to 12.3. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted website. The description does n...

CVE-2015-5821

CVE-2015-5821 details (concrete in sources): WebKit, as used in Apple iOS prior to 9 and iTunes prior to 12.3, is vulnerable to remote exploitation via a crafted web site. The underlying issue is memory corruption that can lead to arbitrary code execution or memory corruption resulting in an appl...

CVE-2015-5874

CVE-2015-5874 affects CoreText in iOS (pre-9) and the iTunes desktop app (pre-12.3). A crafted font file can cause remote code execution or memory corruption. Affected components: CoreText processing; the issue is exploitable via crafted font data delivered remotely. Remediation per documents: up...

CVE-2015-5764

The user interface in Safari in Apple iOS before 9 allows remote attackers to spoof URLs via unspecified vectors, a different vulnerability than CVE-2015-5765 and CVE-2015-5767...

CVE-2015-5841

CVE-2015-5841 concerns the CFNetwork Proxies component on macOS/iOS. Root cause: improper handling of a Set-Cookie header in HTTP CONNECT responses, enabling a remote proxy to inject cookies via a crafted response. Public references in Apple advisories show mitigation by removing the Set-Cookie h...

CVE-2015-5838

CVE-2015-5838 is an Apple iOS SpringBoard vulnerability where access to privileged API calls was not properly restricted, enabling a crafted app to spoof the dialog windows of another app. The connected Apple iOS security update listing (Apple SA-2015-09-16-1) attributes this CVE to the SpringBoa...

CVE-2015-5829

Data Detectors Engine in Apple iOS before 9 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted text file...

CVE-2015-5791

CVE-2015-5791 affects WebKit/JavaScriptCore in Apple iOS before 9 and iTunes before 12.3. A crafted webpage could remotely execute arbitrary code or cause a memory corruption and crash. The connected documents do not specify patch versions or available mitigations; exploitation details are not pr...

CVE-2015-5904

CVE-2015-5904 : Affects Safari on iOS prior to 9.0. A URL handling flaw in Safari’s UI can allow a malicious site to spoof the relationship between the displayed content and its URL, enabling UI spoofing. Exploitation context is via visiting a crafted webpage. Impact is user interface spoofing (p...