CVE-2015-5896

The kernel in Apple iOS before 9 allows local users to gain privileges or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2015-5868 and CVE-2015-5903...

CVE-2015-5767

CVE-2015-5767 is a UI spoofing vulnerability in Safari on iOS prior to iOS 9, allowing a malicious site to spoof displayed URLs. It is part of a set of Safari UI spoofing issues (CVE-2015-5764/5765/5767) addressed by Safari 9, which includes improved URL display logic. The NVD entry cites a Mediu...

CVE-2015-5765

The user interface in Safari in Apple iOS before 9 allows remote attackers to spoof URLs via unspecified vectors, a different vulnerability than CVE-2015-5764 and CVE-2015-5767...

CVE-2015-5895

Multiple unspecified vulnerabilities in SQLite before 3.8.10.2, as used in Apple iOS before 9, have unknown impact and attack vectors...

CVE-2015-5850

AppleKeyStore in Apple iOS before 9 allows physically proximate attackers to reset the count of incorrect passcode attempts via a device backup...

CVE-2015-5796

CVE-2015-5796 concerns WebKit as used in Apple iOS before 9 and iTunes before 12.3. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, distinct from other WebKit CVEs cited by Apple. Th...

CVE-2015-5834

CVE-2015-5834 involves the IOAcceleratorFamily in iOS prior to version 9. A crafted app could cause a disclosure of the kernel memory layout. The root cause is a memory-disclosure path in IOAcceleratorFamily that was addressed by improved bounds checking. The impact is limited to information expo...

CVE-2015-5824

CVE-2015-5824 affects CFNetwork SSL in Apple’s software stack (NSURL) on iOS before 9, where certificate verification fails after a certificate change. This enables man-in-the-middle attackers in privileged network positions to spoof servers and obtain data. Root cause: improper validation of X.5...

CVE-2015-5885

The CFNetwork Cookies component in Apple iOS before 9 allows remote attackers to track users via vectors involving a cookie for a top-level domain...

CVE-2015-5811

WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...

CVE-2015-5793

CVE-2015-5793 affects WebKit/JavaScriptCore used in Apple iOS before 9 and iTunes before 12.3. It allows remote attackers to execute arbitrary code or cause memory corruption and app crashes via a crafted web site. The provided documents do not specify the exact patch version or remediation detai...

CVE-2015-5810

WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...

CVE-2015-5819

WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...

CVE-2015-5825

CVE-2015-5825 is associated with WebKit/Safari (iOS

CVE-2015-5818

CVE-2015-5818 affects WebKit used in Apple iOS before 9 and iTunes before 12.3. A crafted website can trigger a vulnerability that may allow remote code execution or cause a denial of service through memory corruption and application crashes. The provided documents do not specify the exact root c...

CVE-2015-5841

CVE-2015-5841 concerns the CFNetwork Proxies component on macOS/iOS. Root cause: improper handling of a Set-Cookie header in HTTP CONNECT responses, enabling a remote proxy to inject cookies via a crafted response. Public references in Apple advisories show mitigation by removing the Set-Cookie h...

CVE-2015-5899

libpthread in the kernel in Apple iOS before 9 allows local users to gain privileges or cause a denial of service memory corruption via unspecified vectors...

CVE-2015-5835

Apple iOS before 9 allows attackers to obtain sensitive information about inter-app communication via a crafted app that conducts an interception attack involving an unspecified URL scheme...

CVE-2015-5921

CVE-2015-5921 affects WebKit in Apple iOS versions before 9, where the Content-Disposition: attachment HTTP header is mishandled. This could allow a man-in-the-middle to disclose sensitive information via unspecified vectors. The public documentation identifies the issue as a WebKit information‑d...

CVE-2015-5907

WebKit in Apple iOS before 9 allows man-in-the-middle attackers to conduct redirection attacks by leveraging the mishandling of the resource cache of an SSL web site with an invalid X.509 certificate...