CVE-2015-5905: Undefined Security Weakness

Safari in Apple iOS before 9 allows remote attackers to spoof the relationship between URLs and web content via a crafted window opener on a web site...

CVE-2015-5835: Exposure of Sensitive Information to an Unauthorized Actor

Apple iOS before 9 allows attackers to obtain sensitive information about inter-app communication via a crafted app that conducts an interception attack involving an unspecified URL scheme...

PT-2015-2106

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9 Description The issue is related to errors in security settings within the Application Store component. It allows remote attackers to cause a denial of service to an enterprise-signed app via a crafted ITMS URL...

CVE-2015-5855: Exposure of Sensitive Information to an Unauthorized Actor

Apple iOS before 9 allows attackers to discover the e-mail address of a player via a crafted Game Center app...

CVE-2015-5834: Exposure of Sensitive Information to an Unauthorized Actor

IOAcceleratorFamily in Apple iOS before 9 allows attackers to obtain sensitive kernel memory-layout information via a crafted app...

PT-2015-4054

Name of the Vulnerable Software and Affected Versions FreeBSD version 10.1 Apple iOS versions prior to 9 Description The issue is related to the sflush function in fflush.c in stdio in libc, which mishandles failures of the write system call. This allows context-dependent attackers to execute...

CVE-2015-5895: Undefined Security Weakness

Multiple unspecified vulnerabilities in SQLite before 3.8.10.2, as used in Apple iOS before 9, have unknown impact and attack vectors...

CVE-2015-5820: Improper Input Validation

WebKit in Apple iOS before 9 allows remote attackers to trigger a dialing action via a crafted 1 tel://, 2 facetime://, or 3 facetime-audio:// URL...

CVE-2015-5799: Improper Restriction of Operations within the Bounds of a Memory Buffer

WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...

CVE-2015-5817: Improper Restriction of Operations within the Bounds of a Memory Buffer

WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...

PT-2015-2083

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9 Description The issue is related to the WebKit component in Apple iOS, which does not properly restrict access to sensitive information. This allows remote attackers to obtain sensitive information about the brows...

CVE-2015-5838: Improper Access Control

SpringBoard in Apple iOS before 9 does not properly restrict access to privileged API calls, which allows attackers to spoof the dialog windows of an arbitrary app via a crafted app...

CVE-2015-5885: Exposure of Sensitive Information to an Unauthorized Actor

The CFNetwork Cookies component in Apple iOS before 9 allows remote attackers to track users via vectors involving a cookie for a top-level domain...

CVE-2015-5879: Improper Input Validation

XNU in the kernel in Apple iOS before 9 does not properly validate the headers of TCP packets, which allows remote attackers to bypass the sequence-number protection mechanism and cause a denial of service TCP connection disruption via a crafted header...

CVE-2015-5840: Improper Restriction of Operations within the Bounds of a Memory Buffer

The checkint division routines in removefile in Apple iOS before 9 allow attackers to cause a denial of service overflow fault and app crash via crafted data...

CVE-2015-5847: Improper Restriction of Operations within the Bounds of a Memory Buffer

The Disk Images component in Apple iOS before 9 allows local users to gain privileges or cause a denial of service memory corruption via unspecified vectors...

CVE-2015-5906: Exposure of Sensitive Information to an Unauthorized Actor

The HTML form implementation in WebKit in Apple iOS before 9 does not prevent QuickType access to the final character of a password, which might make it easier for remote attackers to discover a password by leveraging a later prediction containing that character...

CVE-2015-5882: Improper Access Control

The processorsettasks API implementation in Apple iOS before 9 allows local users to bypass an entitlement protection mechanism and obtain access to the task ports of arbitrary processes by leveraging root privileges...

CVE-2015-5903: Improper Restriction of Operations within the Bounds of a Memory Buffer

The kernel in Apple iOS before 9 allows local users to gain privileges or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2015-5868 and CVE-2015-5896...

PT-2015-2111

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9 Description The issue is related to a buffer overflow in the Audio component, which can be exploited by remote attackers using a crafted audio file. This exploitation can cause a denial of service, resulting in...