CVE-2015-5804: Improper Restriction of Operations within the Bounds of a Memory Buffer

WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...

CVE-2015-5801

WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...

CVE-2015-5788

The WebKit Canvas implementation in Apple iOS before 9 allows remote attackers to bypass the Same Origin Policy and obtain sensitive image information via vectors involving a CANVAS element...

PT-2015-2111

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9 Description The issue is related to a buffer overflow in the Audio component, which can be exploited by remote attackers using a crafted audio file. This exploitation can cause a denial of service, resulting in...

PT-2015-2084

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9 Description The issue is related to the WebKit component in Apple iOS, which has inadequate access control. This allows remote attackers to bypass the Same Origin Policy by creating a crafted web site. The problem...

CVE-2015-5903: Improper Restriction of Operations within the Bounds of a Memory Buffer

The kernel in Apple iOS before 9 allows local users to gain privileges or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2015-5868 and CVE-2015-5896...

CVE-2015-5862: Improper Restriction of Operations within the Bounds of a Memory Buffer

The Audio component in Apple iOS before 9 allows remote attackers to cause a denial of service memory corruption and application crash via a crafted audio file...

UBUNTU-CVE-2015-5801

WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...

CVE-2015-5835: Exposure of Sensitive Information to an Unauthorized Actor

Apple iOS before 9 allows attackers to obtain sensitive information about inter-app communication via a crafted app that conducts an interception attack involving an unspecified URL scheme...

PT-2015-2106

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9 Description The issue is related to errors in security settings within the Application Store component. It allows remote attackers to cause a denial of service to an enterprise-signed app via a crafted ITMS URL...

CVE-2015-5826: Improper Access Control

WebKit in Apple iOS before 9 does not properly select the cases in which a Cascading Style Sheets CSS document is required to have the text/css content type, which allows remote attackers to bypass the Same Origin Policy via a crafted web site...

CVE-2015-5855: Exposure of Sensitive Information to an Unauthorized Actor

Apple iOS before 9 allows attackers to discover the e-mail address of a player via a crafted Game Center app...

CVE-2015-5834: Exposure of Sensitive Information to an Unauthorized Actor

IOAcceleratorFamily in Apple iOS before 9 allows attackers to obtain sensitive kernel memory-layout information via a crafted app...

PT-2015-4054

Name of the Vulnerable Software and Affected Versions FreeBSD version 10.1 Apple iOS versions prior to 9 Description The issue is related to the sflush function in fflush.c in stdio in libc, which mishandles failures of the write system call. This allows context-dependent attackers to execute...

CVE-2015-5818: Improper Restriction of Operations within the Bounds of a Memory Buffer

WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...

CVE-2015-5895: Undefined Security Weakness

Multiple unspecified vulnerabilities in SQLite before 3.8.10.2, as used in Apple iOS before 9, have unknown impact and attack vectors...

CVE-2015-5799: Improper Restriction of Operations within the Bounds of a Memory Buffer

WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...

CVE-2015-5829: Improper Restriction of Operations within the Bounds of a Memory Buffer

Data Detectors Engine in Apple iOS before 9 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted text file...

CVE-2015-5801: Improper Restriction of Operations within the Bounds of a Memory Buffer

WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...

CVE-2015-5861: Improper Access Control

SpringBoard in Apple iOS before 9 allows physically proximate attackers to bypass a lock-screen preview-disabled setting, and reply to an audio message, via unspecified vectors...