CVE-2015-5752

Backup in Apple iOS before 8.4.1 allows attackers to bypass intended restrictions on filesystem access via a crafted app that creates a symlink...

CVE-2015-5755

CoreText in Apple iOS before 8.4.1 and OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted font file, a different vulnerability than CVE-2015-5761...

CVE-2015-5769

The MSVDX driver in Apple iOS before 8.4.1 allows remote attackers to cause a denial of service device crash via a crafted video...

CVE-2015-3733

CVE-2015-3733 is a WebKit memory-corruption/remote-code-execution issue present in WebKit as used by Apple iOS prior to 8.4.1 and Safari prior to 6.2.8, 7.x prior to 7.1.8, and 8.x prior to 8.0.8. The root cause is memory corruption triggered by complex crafted web content, which can lead to arbi...

CVE-2015-3738

WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVE...

CVE-2015-3734

CVE-2015-3734 concerns WebKit as used in Apple iOS prior to 8.4.1 and Safari prior to 6.2.8, 7.x prior to 7.1.8, and 8.x prior to 8.0.8. A crafted web page can cause remote code execution or a denial of service via memory corruption, potentially crashing the affected application. The initial desc...

CVE-2015-3738

WebKit vulnerability in Apple software: remote code execution or memory corruption/DoS via a crafted website. Affected: WebKit as used in iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8. Root cause described as memory corruption leading to app crash; no remediatio...

CVE-2015-5752

CVE-2015-5752 (Apple iOS Backup Symbolic Link Vulnerability) Affected software: Apple iOS prior to 8.4.1, specifically the Backup component. Root cause: A symbolic link handling flaw in the backup mechanism allowed a crafted app to create symlinks that bypassed intended filesystem access restrict...

CVE-2015-5759

CVE-2015-5759 concerns WebKit in Apple iOS prior to 8.4.1, where a crafted web site exploiting tap events can cause spoofed clicks on other pages. The issue is tied to WebKit’s handling of tap events, enabling a remote attacker to mislead user input. Affected product: iOS devices with WebKit (pre...

CVE-2015-5769

CVE-2015-5769 affects Apple iOS (MSVDX Driver) prior to 8.4.1. A denial-of-service via a crafted video could crash the device; fix implemented in iOS 8.4.1 (improved memory handling for MSVDX Driver).

CVE-2015-5777

CVE-2015-5777 affects CoreMedia Playback on Apple iOS prior to 8.4.1 and OS X prior to 10.10.5. A memory corruption vulnerability in CoreMedia Playback allows remote attackers to execute arbitrary code or cause a denial of service via a crafted movie file. No exploitation details are provided bey...

CVE-2015-3730

CVE-2015-3730 is a WebKit vulnerability that allowed remote code execution or memory-corruption-induced denial of service via a crafted web site. It affected WebKit-based components in Apple products (iOS and Safari) across multiple versions (as cited in the initial doc). Connected advisories con...

CVE-2015-3735

CVE-2015-3735 affects WebKit as used in Apple iOS (before 8.4.1) and Safari (before 6.2.8; 7.x before 7.1.8; 8.x before 8.0.8). The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site, via memory corruption leading to an app crash. C...

CVE-2015-3732

CVE-2015-3732 affects WebKit/WebKit2 used in Apple iOS and Safari; the root cause is memory corruption in WebKit leading to remote code execution or memory corruption crashes when visiting crafted sites. Connected advisories confirm a fix: WebKit2 updated to version 2.10.9 (Mageia/MGASA-2016-0116...

CVE-2015-3744

WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVE...

CVE-2015-3795

libxpc in Apple iOS before 8.4.1 and OS X before 10.10.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app that sends a malformed XPC message...

CVE-2015-3740

CVE-2015-3740 affects WebKit as used in Apple iOS (pre-8.4.1) and Safari (pre-6.2.8, 7.x pre-7.1.8, 8.x pre-8.0.8). It enables remote attackers to execute arbitrary code or cause a denial of service via a crafted web site due to a memory corruption issue. Public references note multiple OS/browse...

CVE-2015-5757

CVE-2015-5757 affects libpthread on Apple iOS < 8.4.1 and macOS

CVE-2015-3746

CVE-2015-3746 affects WebKit used in Apple iOS (before 8.4.1) and Safari (before 6.2.8), as well as WebKit2-based stacks in Linux distributions. The vulnerability allows remote attackers to execute arbitrary code or cause memory corruption and an application crash via a crafted web site. Public r...

CVE-2015-3763

CVE-2015-3763 affects Safari/WebKit on iOS prior to 8.4.1. A crafted webpage can generate numerous JavaScript alert messages, causing a denial of service (apparent browser lock). Apple addressed this in iOS 8.4.1 by throttling alerts. The referenced entry describes a remote, client-side DoS via a...