CVE-2015-3801

The document.cookie API implementation in the CFNetwork Cookies subsystem in WebKit in Apple iOS before 9 allows remote attackers to bypass an intended single-cookie restriction via unspecified vectors...

CVE-2015-5855

CVE-2015-5855 affects Apple iOS (pre‑9.0). A crafted Game Center app can disclose a player’s e‑mail address due to how Game Center handles user emails. Impact: information disclosure. Remediation: update to iOS 9 or later.

CVE-2015-5874

CoreText in Apple iOS before 9 and iTunes before 12.3 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font file...

CVE-2015-5843

Summary (CVE-2015-5843) : A memory corruption vulnerability exists in IOMobileFrameBuffer on Apple iOS versions prior to 9.0, enabling a local attacker to gain privileges or cause a denial of service via unspecified vectors. The vulnerability is addressed in iOS 9 by Apple’s update; affected comp...

CVE-2015-5845

IOKit in the kernel in Apple iOS before 9 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app, a different vulnerability than CVE-2015-5844 and CVE-2015-5846...

CVE-2015-5904

Safari in Apple iOS before 9 allows remote attackers to spoof the relationship between URLs and web content via a crafted web site...

CVE-2015-5879

XNU in the kernel in Apple iOS before 9 does not properly validate the headers of TCP packets, which allows remote attackers to bypass the sequence-number protection mechanism and cause a denial of service TCP connection disruption via a crafted header...

CVE-2015-5832

The iTunes Store component in Apple iOS before 9 does not properly delete AppleID credentials from the keychain upon a signout action, which might allow physically proximate attackers to obtain sensitive information via unspecified vectors...

CVE-2015-5905

Safari in Apple iOS before 9 allows remote attackers to spoof the relationship between URLs and web content via a crafted window opener on a web site...

CVE-2015-5848

IOAcceleratorFamily in Apple iOS before 9 allows local users to gain privileges or cause a denial of service memory corruption via unspecified vectors...

CVE-2015-5896

The kernel in Apple iOS before 9 allows local users to gain privileges or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2015-5868 and CVE-2015-5903...

CVE-2015-5767

CVE-2015-5767 is a UI spoofing vulnerability in Safari on iOS prior to iOS 9, allowing a malicious site to spoof displayed URLs. It is part of a set of Safari UI spoofing issues (CVE-2015-5764/5765/5767) addressed by Safari 9, which includes improved URL display logic. The NVD entry cites a Mediu...

CVE-2015-5765

The user interface in Safari in Apple iOS before 9 allows remote attackers to spoof URLs via unspecified vectors, a different vulnerability than CVE-2015-5764 and CVE-2015-5767...

CVE-2015-5821

CVE-2015-5821 details (concrete in sources): WebKit, as used in Apple iOS prior to 9 and iTunes prior to 12.3, is vulnerable to remote exploitation via a crafted web site. The underlying issue is memory corruption that can lead to arbitrary code execution or memory corruption resulting in an appl...

CVE-2015-5907

CVE-2015-5907 affects WebKit in Apple iOS prior to 9.0. The root cause described is the mishandling of the resource cache for SSL web sites with invalid X.509 certificates, enabling MITM-style redirection attacks. Public narrative across connected documents confirms the same description (iOS

CVE-2015-5895

Multiple unspecified vulnerabilities in SQLite before 3.8.10.2, as used in Apple iOS before 9, have unknown impact and attack vectors...

CVE-2015-5850

AppleKeyStore in Apple iOS before 9 allows physically proximate attackers to reset the count of incorrect passcode attempts via a device backup...

CVE-2015-5796

CVE-2015-5796 concerns WebKit as used in Apple iOS before 9 and iTunes before 12.3. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, distinct from other WebKit CVEs cited by Apple. Th...

CVE-2015-5834

CVE-2015-5834 involves the IOAcceleratorFamily in iOS prior to version 9. A crafted app could cause a disclosure of the kernel memory layout. The root cause is a memory-disclosure path in IOAcceleratorFamily that was addressed by improved bounds checking. The impact is limited to information expo...

CVE-2015-5824

CVE-2015-5824 affects CFNetwork SSL in Apple’s software stack (NSURL) on iOS before 9, where certificate verification fails after a certificate change. This enables man-in-the-middle attackers in privileged network positions to spoof servers and obtain data. Root cause: improper validation of X.5...