CVE-2015-5797

CVE-2015-5797 affects WebKit as used in Apple iOS before 9 and iTunes before 12.3. The vulnerability arises from a memory corruption flaw in WebKit that can be triggered by a crafted web site, enabling remote code execution or causing a denial of service (application crash). The available connect...

CVE-2015-5835

Apple iOS before 9 allows attackers to obtain sensitive information about inter-app communication via a crafted app that conducts an interception attack involving an unspecified URL scheme...

CVE-2015-5812

CVE-2015-5812 affects WebKit as used in Apple iOS before 9 and iTunes before 12.3. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. The root cause is memory corruption within WebKit l...

CVE-2015-5825

CVE-2015-5825 is associated with WebKit/Safari (iOS

CVE-2015-5791

WebKit, as used in JavaScriptCore in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in...

CVE-2015-5832: Exposure of Sensitive Information to an Unauthorized Actor

The iTunes Store component in Apple iOS before 9 does not properly delete AppleID credentials from the keychain upon a signout action, which might allow physically proximate attackers to obtain sensitive information via unspecified vectors...

CVE-2015-5856: Undefined Security Weakness

The Application Store component in Apple iOS before 9 allows remote attackers to cause a denial of service to an enterprise-signed app via a crafted ITMS URL...

PT-2015-2101

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9 Description The issue is caused by a buffer overflow in the Disk Images component of the iOS operating system. This can be exploited by a local attacker to gain elevated privileges or cause a denial of service,...

PT-2015-2108

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9 Description The issue is related to the CFNetwork HTTPProtocol component, which allows remote attackers to bypass the HSTS protection mechanism. This can be achieved via a crafted URL, potentially leading to the...

PT-2015-2083

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9 Description The issue is related to the WebKit component in Apple iOS, which does not properly restrict access to sensitive information. This allows remote attackers to obtain sensitive information about the brows...

PT-2015-2104

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9 Description The issue is related to the Multipeer Connectivity component, which does not require an encrypted session. This allows local users to obtain cleartext multipeer data via an encrypted-to-unencrypted...

PT-2015-2082

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9 Description The issue is related to the NSURL implementation in the CFNetwork SSL component, which does not properly verify X.509 certificates from SSL servers after a certificate change. This allows attackers to...

PT-2015-3059

Name of the Vulnerable Software and Affected Versions SQLite versions prior to 3.8.10.2 Apple iOS versions prior to 9 Description The issue is related to multiple unspecified vulnerabilities in SQLite and Apple iOS. These vulnerabilities are associated with coding errors. Exploitation of these...

PT-2015-2137

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9 Description The issue is related to the WebKit Canvas implementation, which lacks protection of service data. This can be exploited by a remote attacker to bypass the Same Origin Policy and gain access to sensitiv...

PT-2015-2103

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9 Description The issue is related to errors in security settings of the AppleKeyStore component in the iOS operating system. It allows a local attacker to reset the count of incorrect passcode attempts using the...

CVE-2015-5822

WebKit, as used in JavaScriptCore in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in...

CVE-2015-5846: Improper Restriction of Operations within the Bounds of a Memory Buffer

IOKit in the kernel in Apple iOS before 9 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app, a different vulnerability than CVE-2015-5844 and CVE-2015-5845...

CVE-2015-5809

WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...

PT-2015-2117

Name of the Vulnerable Software and Affected Versions Dev Tools in Apple iOS versions prior to 9 Description The issue is related to a buffer overflow in the dyld component, which can be exploited by attackers to execute arbitrary code in a privileged context or cause a denial of service due to...

CVE-2015-5837: Improper Input Validation

PluginKit in Apple iOS before 9 allows attackers to bypass an intended app-trust requirement and install arbitrary extensions via a crafted enterprise app...