CVE-2015-5862

The Audio component in Apple iOS before 9 allows remote attackers to cause a denial of service memory corruption and application crash via a crafted audio file...

CVE-2015-5857

The CVE-2015-5857 vulnerability affects Apple iOS Mail prior to iOS 9, where an attacker could spoof the sender by abusing a contact in the address book via unspecified vectors. Root cause is in the Mail sender/address handling logic that allowed spoofed from addresses. Impact is spoofed emails a...

CVE-2015-5855

Apple iOS before 9 allows attackers to discover the e-mail address of a player via a crafted Game Center app...

CVE-2015-5823

CVE-2015-5823 affects WebKit/JavaScriptCore as used in Apple iOS prior to 9 and iTunes prior to 12.3. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. The provided connected documents...

CVE-2015-5806

CVE-2015-5806 affects WebKit as used in Apple iOS before 9 and iTunes before 12.3. A crafted web site can trigger a memory corruption that may allow remote code execution or cause a denial of service (application crash). The vulnerability is tied to WebKit’s handling of certain content, with the ...

CVE-2015-5816

The CVE-2015-5816 entry concerns WebKit/JavaScriptCore as used in Apple iOS prior to 9 and iTunes prior to 12.3. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted website. The description does n...

CVE-2015-5764

The user interface in Safari in Apple iOS before 9 allows remote attackers to spoof URLs via unspecified vectors, a different vulnerability than CVE-2015-5765 and CVE-2015-5767...

CVE-2015-5838

CVE-2015-5838 is an Apple iOS SpringBoard vulnerability where access to privileged API calls was not properly restricted, enabling a crafted app to spoof the dialog windows of another app. The connected Apple iOS security update listing (Apple SA-2015-09-16-1) attributes this CVE to the SpringBoa...

CVE-2015-5829

Data Detectors Engine in Apple iOS before 9 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted text file...

CVE-2015-5904

CVE-2015-5904 : Affects Safari on iOS prior to 9.0. A URL handling flaw in Safari’s UI can allow a malicious site to spoof the relationship between the displayed content and its URL, enabling UI spoofing. Exploitation context is via visiting a crafted webpage. Impact is user interface spoofing (p...

CVE-2015-5846

CVE-2015-5846 is listed as a kernel memory corruption in IOKit affecting Apple iOS. The vulnerability allows a crafted app to execute arbitrary code with system privileges or cause memory corruption leading to a denial of service. Connected advisories map this CVE to the iOS kernel/IOKit memory h...

CVE-2015-5846

IOKit in the kernel in Apple iOS before 9 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app, a different vulnerability than CVE-2015-5844 and CVE-2015-5845...

CVE-2015-5869

The Neighbor Discovery ND protocol implementation in the IPv6 stack in Apple iOS before 9 allows remote attackers to reconfigure a hop-limit setting via a small hoplimit value in a Router Advertisement RA message...

CVE-2015-5855

CVE-2015-5855 affects Apple iOS (pre‑9.0). A crafted Game Center app can disclose a player’s e‑mail address due to how Game Center handles user emails. Impact: information disclosure. Remediation: update to iOS 9 or later.

CVE-2015-5874

CoreText in Apple iOS before 9 and iTunes before 12.3 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font file...

CVE-2015-5843

Summary (CVE-2015-5843) : A memory corruption vulnerability exists in IOMobileFrameBuffer on Apple iOS versions prior to 9.0, enabling a local attacker to gain privileges or cause a denial of service via unspecified vectors. The vulnerability is addressed in iOS 9 by Apple’s update; affected comp...

CVE-2015-5904

Safari in Apple iOS before 9 allows remote attackers to spoof the relationship between URLs and web content via a crafted web site...

CVE-2015-5879

XNU in the kernel in Apple iOS before 9 does not properly validate the headers of TCP packets, which allows remote attackers to bypass the sequence-number protection mechanism and cause a denial of service TCP connection disruption via a crafted header...

CVE-2015-5788

The CVE-2015-5788 entry describes a flaw in WebKit Canvas handling on iOS prior to version 9 that allows remote attackers to bypass the same-origin policy and read sensitive image data via CANVAS-related vectors. The vulnerability affects the WebKit Canvas implementation and arises from insuffici...

CVE-2015-5797

CVE-2015-5797 affects WebKit as used in Apple iOS before 9 and iTunes before 12.3. The vulnerability arises from a memory corruption flaw in WebKit that can be triggered by a crafted web site, enabling remote code execution or causing a denial of service (application crash). The available connect...