CVE-2015-1106

The QuickType feature in the Keyboards subsystem in Apple iOS before 8.3 allows physically proximate attackers to discover passcodes by reading the lock screen during use of a Bluetooth keyboard...

CVE-2015-1111

Safari in Apple iOS before 8.3 does not delete Recently Closed Tabs data in response to a history-clearing action, which allows attackers to obtain sensitive information by reading a history file...

CVE-2015-1124

The CVE-2015-1124 entry concerns WebKit as used in Apple products (iOS before 8.3, Apple TV before 7.2, Safari before 6.2.5, 7.x before 7.1.5, 8.x before 8.0.5) where a crafted web site can trigger remote code execution or memory corruption, potentially causing an application crash. Connected sou...

CVE-2015-1115

The Telephony component in Apple iOS before 8.3 allows attackers to bypass a sandbox protection mechanism and access unintended telephone capabilities via a crafted app...

CVE-2015-1117

The 1 setreuid and 2 setregid system-call implementations in the kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 do not properly perform privilege drops, which makes it easier for attackers to execute code with unintended user or group privileges via a crafted a...

CVE-2015-1085

AppleKeyStore in Apple iOS before 8.3 does not properly restrict a certain passcode-confirmation interface, which makes it easier for attackers to verify correct passcode guesses via a crafted app...

CVE-2015-1121

WebKit, as used in Apple iOS before 8.3, Apple TV before 7.2, and Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different...

Apple iOS < 8.3 Multiple Vulnerabilities

Binary data appleios83check.nbin...

CVE-2015-1120

WebKit, as used in Apple iOS before 8.3, Apple TV before 7.2, and Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different...

Apple iOS Sandbox Bypass Sensitive Information Disclosure Vulnerability (CNVD-2015-02305)

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. An information disclosure vulnerability exists in Apple iOS Handling Third-Party App Sandbox, which allows attackers to exploit the vulnerability to maliciously access phone numbers or EMAIL contact...

Apple iOS IOHIDFamily Memory Leak Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A memory content disclosure vulnerability exists in Apple iOS IOHIDFamily, which allows local attackers to exploit the vulnerability to obtain sensitive information...

Apple iOS setreuid Call Denial of Service Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A contention condition error in the Apple iOS kernel setreuid system call allows local attackers to exploit the vulnerability to crash the system...

Apple iOS Webkit suffers from unspecified memory corruption vulnerability (CNVD-2015-02325)

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. An unspecified memory corruption vulnerability exists in Apple iOS Webkit, which allows attackers to exploit the vulnerability to construct a malicious web page that can be tricked into being parsed by a...

Apple iOS Webkit Clickjacking Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. An unspecified clickjacking vulnerability exists in Apple iOS Webkit, which allows attackers to exploit the vulnerability to construct malicious URIs, trick users into parsing them, and redirect user...

Apple iOS setreuid and setregid call elevation of privilege vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A security building exists in the Apple iOS kernel setreuid and setregid, due to the Apple iOS kernel failing to properly drop privileges. A local attacker can exploit the vulnerability to elevate...

Unspecified Memory Corruption Vulnerability in Apple iOS

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. An unspecified memory corruption vulnerability exists in the Apple iOS kernel, which allows attackers to exploit the vulnerability to execute arbitrary code...

Apple iOS User Password Guessing Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. Apple iOS has a security vulnerability that allows attackers to exploit the vulnerability to maliciously guess user passwords...

Apple iOS Audio Using IOKit Object Validation Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. Apple iOS audio uses an IOKit object with a checksum issue that allows malicious applications to exploit the vulnerability to execute arbitrary code...

Unspecified Denial of Service Vulnerability in Apple iOS

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A denial of service vulnerability in the Apple iOS kernel's handling of TCP out of band data allows remote attackers to conduct denial of service attacks by exploiting the vulnerability...

Apple iOS Sandbox Bypass Sensitive Information Disclosure Vulnerability (CNVD-2015-02306)

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. An information disclosure vulnerability exists in Apple iOS Handling Third-Party App Sandbox, which allows attackers to exploit the vulnerability to maliciously access phone numbers or EMAIL contact...