CVE-2015-5773

The CVE-2015-5773 issue affects Apple’s QL Office component and can be exploited by a crafted office document to trigger memory corruption, potentially allowing remote code execution or a denial of service. Affected products cited in the public description are Apple iOS before 8.4.1 and OS X befo...

CVE-2015-3805

Apple iOS before 8.4.1 and OS X before 10.10.5 allow local users to bypass a code-signing protection mechanism via a crafted Mach-O file, a different vulnerability than CVE-2015-3802...

CVE-2015-3731

WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVE...

CVE-2015-5755

CVE-2015-5755 affects CoreText in Apple iOS < 8.4.1 and OS X

CVE-2015-3747

CVE-2015-3747 affects WebKit used in Apple iOS (pre-8.4.1) and Safari (pre-6.2.8, 7.x pre-7.1.8, 8.x pre-8.0.8). A crafted website could trigger remote code execution or memory corruption leading to application crash (denial of service). Root cause is memory corruption in WebKit components expose...

CVE-2015-3749

CVE-2015-3749 affects WebKit as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. The ro...

CVE-2015-3737

WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVE...

CVE-2015-5756

The CVE-2015-5756 entry concerns Apple FontParser in iOS before 8.4.1 and OS X before 10.10.5. The issue is a memory corruption vulnerability triggered by processing crafted font files, enabling remote arbitrary code execution or a denial of service (application crash). Connected documents corrob...

CVE-2015-3796

The TRE library in Libc in Apple iOS before 8.4.1 and OS X before 10.10.5 allows context-dependent attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted regular expression, a different vulnerability than CVE-2015-3797 and...

CVE-2015-3804

FontParser in Apple iOS before 8.4.1 and OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted font file, a different vulnerability than CVE-2015-5756 and CVE-2015-5775...

CVE-2015-3731

CVE-2015-3731 affects WebKit as used in Apple iOS < 8.4.1 and Safari < 6.2.8, 7.x < 7.1.8, and 8.x

CVE-2015-3736

CVE-2015-3736 affects WebKit as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8. The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site, due to memory corruption. Public details in the provided...

CVE-2015-3740

WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVE...

CVE-2015-3737

CVE-2015-3737 affects WebKit (as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8) and allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site (memory corruption and app crash). Public references indicate ...

CVE-2015-3756

The Certificate UI in Apple iOS before 8.4.1 does not prevent X.509 certificate acceptance within the lock screen, which allows physically proximate attackers to establish arbitrary certificate trust relationships by completing a dialog...

CVE-2015-5774

Buffer overflow in IOHIDFamily in Apple iOS before 8.4.1 and OS X before 10.10.5 allows local users to gain privileges via unspecified vectors...

CVE-2015-3739

WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVE...

CVE-2015-3759

Location Framework in Apple iOS before 8.4.1 allows local users to bypass intended restrictions on filesystem modification via a symlink...

CVE-2015-5746

AppleFileConduit in Apple iOS before 8.4.1 allows attackers to bypass intended restrictions on filesystem access via an afc command that leverages symlink mishandling...

CVE-2015-3796

CVE-2015-3796 affects the TRE library used by Apple’s iOS and macOS. A crafted regular expression can trigger a memory corruption in TRE, leading to arbitrary code execution or a denial of service (memory corruption and application crash). The description specifies affected versions: iOS prior to...