PT-2015-5075

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.3 Apple OS X versions prior to 10.10.3 Description The issue allows remote attackers to bypass the Same Origin Policy via a crafted web site, due to improper handling of request headers during processing of...

CVE-2015-1113: Exposure of Sensitive Information to an Unauthorized Actor

The Sandbox Profiles component in Apple iOS before 8.3 allows attackers to read the 1 telephone number or 2 e-mail address of a recent contact via a crafted app...

PT-2015-5103

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.3 Apple TV versions prior to 7.2 Apple Safari versions prior to 6.2.5, 7.1.5, and 8.0.5 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory...

PT-2015-5072

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.3 Apple OS X versions prior to 10.10.3 Description The issue is related to the CFURL component in Apple iOS and Apple OS X, which fails to properly validate URLs. This allows remote attackers to execute arbitrary...

PT-2015-5079

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.3 Apple OS X versions prior to 10.10.3 Apple TV versions prior to 7.2 Description The issue allows physically proximate attackers to execute arbitrary code or cause a denial of service due to memory corruption via...

PT-2015-5083

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.3 Apple OS X versions prior to 10.10.3 Apple TV versions prior to 7.2 Description A race condition exists in the setreuid system-call implementation in the kernel, allowing attackers to cause a denial of service v...

PT-2015-5084

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.3 Apple OS X versions prior to 10.10.3 Apple TV versions prior to 7.2 Description The issue allows attackers to cause a denial of service or obtain sensitive memory-content information via a crafted app. This is d...

PT-2015-5086

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.3 Apple OS X versions prior to 10.10.3 Apple TV versions prior to 7.2 Description The issue is related to the kernel's handling of TCP headers, which can be exploited by man-in-the-middle attackers to cause a deni...

PT-2015-5088

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.3 Apple OS X versions prior to 10.10.3 Apple TV versions prior to 7.2 Description The issue concerns the kernel's handling of IPv6 packets, specifically its failure to properly determine the origin of such packets...

PT-2015-5089

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.3 Apple OS X versions prior to 10.10.3 Apple TV versions prior to 7.2 Description The issue is related to the TCP implementation in the kernel, specifically with the Urgent mechanism, also known as out-of-band dat...

PT-2015-5098

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.3 Apple TV versions prior to 7.2 Description The issue allows attackers to discover hardware identifiers via a crafted app, specifically affecting the Sandbox Profiles component. Recommendations For Apple iOS...

PT-2015-5105

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.3 Apple TV versions prior to 7.2 Apple Safari versions prior to 6.2.5, 7.1.5, and 8.0.5 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory...

PT-2015-5104

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.3 Apple TV versions prior to 7.2 Apple Safari versions prior to 6.2.5 Apple Safari 7.x versions prior to 7.1.5 Apple Safari 8.x versions prior to 8.0.5 Description The issue allows remote attackers to execute...

PT-2015-5106

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.3 Apple TV versions prior to 7.2 Apple Safari versions prior to 6.2.5, 7.1.5, and 8.0.5 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory...

PT-2015-5108

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.3 Apple TV versions prior to 7.2 Apple Safari versions prior to 6.2.5, 7.1.5, and 8.0.5 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory...

PT-2015-5077

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.3 Apple OS X versions prior to 10.10.3 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service due to memory corruption via a crafted font file. Recommendations For App...

PT-2015-5101

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.3 Apple OS X versions prior to 10.10.3 Apple TV versions prior to 7.2 Description The issue is related to the setreuid and setregid system-call implementations in the kernel, which do not properly perform privileg...

PT-2015-5080

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.3 Apple OS X versions prior to 10.10.3 Apple TV versions prior to 7.2 Description The issue allows attackers to obtain sensitive information about kernel memory via a crafted app. This is related to IOHIDFamily...

CVE-2015-1123: Undefined Security Weakness

WebKit, as used in Apple iOS before 8.3 and Apple TV before 7.2, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-04-08-3 and...

CVE-2015-1114: Exposure of Sensitive Information to an Unauthorized Actor

The Sandbox Profiles component in Apple iOS before 8.3 and Apple TV before 7.2 allows attackers to discover hardware identifiers via a crafted app...