CVE-2015-5791

WebKit, as used in JavaScriptCore in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in...

CVE-2015-5794

WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...

CVE-2015-5892

Siri in Apple iOS before 9 allows physically proximate attackers to bypass an intended client-side protection mechanism and obtain sensitive content-notification information by listening to a device in the lock-screen state...

CVE-2015-5895

CVE-2015-5895 affects SQLite versions before 3.8.10.2 used in Apple iOS up to iOS 9; the advisory notes unknown impact/attack vectors. The F5 advisory confirms the CVE and references remediation via updating SQLite to 3.8.10.2; separate entries corroborate the affected version. If deploying affec...

CVE-2015-5807

CVE-2015-5807 affects WebKit as used in Apple iOS prior to iOS 9 and iTunes prior to 12.3. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. The description notes this is a different v...

CVE-2015-5806

CVE-2015-5806 affects WebKit as used in Apple iOS before 9 and iTunes before 12.3. A crafted web site can trigger a memory corruption that may allow remote code execution or cause a denial of service (application crash). The vulnerability is tied to WebKit’s handling of certain content, with the ...

CVE-2015-5847

The Disk Images component in Apple iOS before 9 allows local users to gain privileges or cause a denial of service memory corruption via unspecified vectors...

CVE-2015-5850

AppleKeyStore in iOS before 9 is vulnerable: local attackers who have physical access can reset the count of failed passcode attempts via a device backup, effectively weakening the passcode protection. The underlying issue is in the passcode failure logic when handling backups, enabling a restora...

CVE-2015-5840

The checkint division routines in removefile in Apple iOS before 9 allow attackers to cause a denial of service overflow fault and app crash via crafted data...

CVE-2015-5842

CVE-2015-5842 affects Apple’s XNU kernel (macOS/iOS) where an uninitialized kernel data structure could allow a local attacker to determine kernel memory layout. The connected Nessus/NASL entries confirm the root cause as a kernel memory-layout disclosure and note that the issue was mitigated by ...

CVE-2015-5804

WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...

CVE-2015-5792

CVE-2015-5792 affects WebKit as used in Apple iOS prior to 9 and iTunes prior to 12.3. The vulnerability arises from WebKit’s handling of crafted web content, enabling remote attackers to execute arbitrary code or cause memory corruption and application crashes. Affected component: WebKit (Apple ...

CVE-2015-5921

CVE-2015-5921 affects WebKit in Apple iOS versions before 9, where the Content-Disposition: attachment HTTP header is mishandled. This could allow a man-in-the-middle to disclose sensitive information via unspecified vectors. The public documentation identifies the issue as a WebKit information‑d...

CVE-2015-5896

CVE-2015-5896 is a kernel memory-corruption vulnerability in Apple iOS prior to iOS 9 that enables local privilege escalation or memory corruption via unspecified vectors. The vulnerability is listed among iOS/Kernel CVEs and is addressed by updating to iOS 9, per Apple’s advisory. Connected docu...

CVE-2015-5801

CVE-2015-5801 concerns WebKit as used in Apple iOS before 9 and iTunes before 12.3. A crafted web site could cause remote code execution or a denial of service via memory corruption, leading to an application crash. The vulnerability is triggered through WebKit’s handling of web content, and is d...

CVE-2015-5814

CVE-2015-5814 affects WebKit as used by JavaScriptCore in Apple iOS (pre-9) and iTunes (pre-12.3). The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site, due to memory corruption that can crash the application. The provided documen...

CVE-2015-5863

IOStorageFamily in Apple iOS before 9 does not properly initialize an unspecified data structure, which allows local users to obtain sensitive information from kernel memory via unknown vectors...

CVE-2015-5789

CVE-2015-5789 affects WebKit used in Apple iOS before 9 and iTunes before 12.3. A crafted web site can remotely execute arbitrary code or cause a denial of service due to memory corruption leading to an application crash. The vulnerability is tied to WebKit’s handling of content (no specific comp...

CVE-2015-5899

libpthread in the kernel in Apple iOS before 9 allows local users to gain privileges or cause a denial of service memory corruption via unspecified vectors...

CVE-2015-5797

CVE-2015-5797 affects WebKit as used in Apple iOS before 9 and iTunes before 12.3. The vulnerability arises from a memory corruption flaw in WebKit that can be triggered by a crafted web site, enabling remote code execution or causing a denial of service (application crash). The available connect...