CVE-2015-1104: Improper Input Validation

The kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 does not properly determine whether an IPv6 packet had a local origin, which allows remote attackers to bypass an intended network-filtering protection mechanism via a crafted packet...

CVE-2015-1086: Improper Input Validation

The Audio Drivers subsystem in Apple iOS before 8.3 and Apple TV before 7.2 does not properly validate IOKit object metadata, which allows attackers to execute arbitrary code in a privileged context via a crafted app...

CVE-2015-1090: Exposure of Sensitive Information to an Unauthorized Actor

CFNetwork in Apple iOS before 8.3 does not delete HTTP Strict Transport Security HSTS state information in response to a Safari history-clearing action, which allows attackers to obtain sensitive information by reading a history file...

CVE-2015-1089: Exposure of Sensitive Information to an Unauthorized Actor

CFNetwork in Apple iOS before 8.3 and Apple OS X before 10.10.3 does not properly handle cookies during processing of redirects in HTTP responses, which allows remote attackers to bypass the Same Origin Policy via a crafted web site...

CVE-2015-1120: Undefined Security Weakness

WebKit, as used in Apple iOS before 8.3, Apple TV before 7.2, and Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different...

CVE-2015-1115: Improper Access Control

The Telephony component in Apple iOS before 8.3 allows attackers to bypass a sandbox protection mechanism and access unintended telephone capabilities via a crafted app...

CVE-2015-1110: Exposure of Sensitive Information to an Unauthorized Actor

The Podcasts component in Apple iOS before 8.3 and Apple TV before 7.2 allows remote attackers to discover unique identifiers by reading asset-download request data...

CVE-2015-1102: Improper Input Validation

The kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 does not properly handle TCP headers, which allows man-in-the-middle attackers to cause a denial of service via unspecified vectors...

CVE-2015-1101: Undefined Security Weakness

The kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

CVE-2015-1100: Improper Restriction of Operations within the Bounds of a Memory Buffer

The kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 allows attackers to cause a denial of service out-of-bounds memory access or obtain sensitive memory-content information via a crafted app...

CVE-2015-1099: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in the setreuid system-call implementation in the kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 allows attackers to cause a denial of service via a crafted app...

CVE-2015-1105: Improper Input Validation

The TCP implementation in the kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 does not properly implement the Urgent aka out-of-band data mechanism, which allows remote attackers to cause a denial of service via crafted packets...

CVE-2015-1097: Exposure of Sensitive Information to an Unauthorized Actor

IOMobileFramebuffer in Apple iOS before 8.3 and Apple TV before 7.2 allows attackers to obtain sensitive information about kernel memory via a crafted app...

PT-2015-5070

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.3 Apple TV versions prior to 7.2 Description The issue is related to the Audio Drivers subsystem, which does not properly validate IOKit object metadata. This allows attackers to execute arbitrary code in a...

PT-2015-5078

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.3 Apple TV versions prior to 7.2 Description The issue allows attackers to obtain sensitive information about kernel memory via a crafted app. This is related to the IOAcceleratorFamily component. Recommendations...

PT-2015-5109

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.3 Description The issue is related to the touch-events implementation in WebKit, allowing remote attackers to trigger an association between a tap and an unintended web resource via a crafted web site...

CVE-2015-1125: Undefined Security Weakness

The touch-events implementation in WebKit in Apple iOS before 8.3 allows remote attackers to trigger an association between a tap and an unintended web resource via a crafted web site...

CVE-2015-1126: Improper Input Validation

WebKit, as used in Apple iOS before 8.3 and Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5, does not properly handle the userinfo field in FTP URLs, which allows remote attackers to trigger incorrect resource access via unspecified vectors...

PT-2015-5081

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.3 Apple TV versions prior to 7.2 Description The issue allows attackers to obtain sensitive information about kernel memory via a crafted app, potentially compromising the security of the device. Recommendations F...

Apple iOS User Password Guessing Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. Apple iOS has a security vulnerability that allows attackers to exploit the vulnerability to maliciously guess user passwords...