CVE-2015-3759

Location Framework in Apple iOS before 8.4.1 allows local users to bypass intended restrictions on filesystem modification via a symlink...

CVE-2015-3797

The TRE library in Libc in Apple iOS before 8.4.1 and OS X before 10.10.5 allows context-dependent attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted regular expression, a different vulnerability than CVE-2015-3796 and...

CVE-2015-5746

AppleFileConduit in Apple iOS before 8.4.1 allows attackers to bypass intended restrictions on filesystem access via an afc command that leverages symlink mishandling...

CVE-2015-3796

CVE-2015-3796 affects the TRE library used by Apple’s iOS and macOS. A crafted regular expression can trigger a memory corruption in TRE, leading to arbitrary code execution or a denial of service (memory corruption and application crash). The description specifies affected versions: iOS prior to...

CVE-2015-3797

Technical details about CVE-2015-3797 are not present in the connected documents. The initial description provides general impact, but there is no specific product/version/root cause/mitigation information in the supplied sources. Monitor for updates.

CVE-2015-3744

CVE-2015-3744 affects WebKit as used in Apple iOS (before 8.4.1) and Safari (before 6.2.8, 7.x before 7.1.8, 8.x before 8.0.8). The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site, via memory corruption in WebKit components. Conn...

CVE-2015-3793

CVE-2015-3793 affects iOS prior to 8.4.1. It describes a flaw in CFPreferences that lets a crafted third‑party app bypass the third‑party app sandbox protections and read arbitrary managed preferences. Apple patched this in iOS 8.4.1 by reinforcing the sandbox profile (CFPreferences/Sandbox_profi...

CVE-2015-5776

CVE-2015-5776 affects Libinfo in Apple iOS before 8.4.1 and macOS before 10.10.5. The vulnerability allows a remote attacker to cause memory corruption, leading to arbitrary code execution or a denial of service by abusing use of an AF_INET6 socket. The Apple listing confirms the Libinfo memory c...

CVE-2015-3745

CVE-2015-3745 involves WebKit used in Apple iOS before 8.4.1 and Safari before 6.2.8, and versions 7.x before 7.1.8, 8.x before 8.0.8. The vulnerability allows a remote attacker to run arbitrary code or cause a denial of service through a crafted web site, via memory corruption and application cr...

CVE-2015-3807

Mode C: CVE-2015-3807 affects libxml2 in Apple iOS <= 8.4.1 and OS X

CVE-2015-5749

The CVE-2015-5749 issue affects Apple iOS prior to 8.4.1, where the Sandbox_profiles component (and CFPreferences under the third‑party app sandbox) could be bypassed by a crafted app to read arbitrary managed preferences. Apple and ThreatPost describe an in enterprise context where MDM‑provided ...

CVE-2015-5778

CVE-2015-5778 is an Apple CoreMedia Playback memory corruption vulnerability. The description states that, on iOS versions prior to 8.4.1 and OS X prior to 10.10.5, a crafted movie file can cause memory corruption leading to remote code execution or a denial of service. The connected material con...

PT-2015-1853

Name of the Vulnerable Software and Affected Versions Safari versions prior to 6.2.8 Safari versions 7.x prior to 7.1.8 Safari versions 8.x prior to 8.0.8 Apple iOS versions prior to 8.4.1 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service via a...

CVE-2015-3776: Improper Restriction of Operations within the Bounds of a Memory Buffer

IOKit in Apple iOS before 8.4.1 and OS X before 10.10.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption and application crash via a malformed plist...

CVE-2015-3749: Improper Restriction of Operations within the Bounds of a Memory Buffer

WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVE...

CVE-2015-3745

WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVE...

PT-2015-1867

Name of the Vulnerable Software and Affected Versions Safari versions prior to 6.2.8 Safari versions 7.x prior to 7.1.8 Safari versions 8.x prior to 8.0.8 Apple iOS versions prior to 8.4.1 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service via a...

PT-2015-1859

Name of the Vulnerable Software and Affected Versions Safari versions prior to 6.2.8 Safari versions 7.x prior to 7.1.8 Safari versions 8.x prior to 8.0.8 Apple iOS versions prior to 8.4.1 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service via a...

PT-2015-1887

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.4.1 Apple OS X versions prior to 10.10.5 Description The issue allows attackers to access an iCloud user record associated with a previous user's login session via a crafted app. This is due to a lack of protectio...

CVE-2015-5761: Improper Restriction of Operations within the Bounds of a Memory Buffer

CoreText in Apple iOS before 8.4.1 and OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted font file, a different vulnerability than CVE-2015-5755...