Apple iOS setreuid and setregid call elevation of privilege vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A security building exists in the Apple iOS kernel setreuid and setregid, due to the Apple iOS kernel failing to properly drop privileges. A local attacker can exploit the vulnerability to elevate...

Apple iOS Sandbox Bypass Sensitive Information Disclosure Vulnerability (CNVD-2015-02305)

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. An information disclosure vulnerability exists in Apple iOS Handling Third-Party App Sandbox, which allows attackers to exploit the vulnerability to maliciously access phone numbers or EMAIL contact...

Apple iOS TCP Header Handling Denial of Service Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A denial of service issue exists in the Apple iOS kernel's handling of TCP headers, allowing remote attackers to exploit the vulnerability for denial of service attacks...

Unspecified Memory Corruption Vulnerability in Apple iOS

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. An unspecified memory corruption vulnerability exists in the Apple iOS kernel, which allows attackers to exploit the vulnerability to execute arbitrary code...

Apple iOS IOHIDFamily Memory Leak Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A memory content disclosure vulnerability exists in Apple iOS IOHIDFamily, which allows local attackers to exploit the vulnerability to obtain sensitive information...

Apple iOS Sandbox Bypass Sensitive Information Disclosure Vulnerability (CNVD-2015-02306)

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. An information disclosure vulnerability exists in Apple iOS Handling Third-Party App Sandbox, which allows attackers to exploit the vulnerability to maliciously access phone numbers or EMAIL contact...

Apple iOS setreuid Call Denial of Service Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A contention condition error in the Apple iOS kernel setreuid system call allows local attackers to exploit the vulnerability to crash the system...

Apple iOS Webkit Clickjacking Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. An unspecified clickjacking vulnerability exists in Apple iOS Webkit, which allows attackers to exploit the vulnerability to construct malicious URIs, trick users into parsing them, and redirect user...

Unspecified Denial of Service Vulnerability in Apple iOS

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A denial of service vulnerability in the Apple iOS kernel's handling of TCP out of band data allows remote attackers to conduct denial of service attacks by exploiting the vulnerability...

Apple iOS Webkit suffers from unspecified memory corruption vulnerability (CNVD-2015-02325)

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. An unspecified memory corruption vulnerability exists in Apple iOS Webkit, which allows attackers to exploit the vulnerability to construct a malicious web page that can be tricked into being parsed by a...

Apple iOS Audio Using IOKit Object Validation Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. Apple iOS audio uses an IOKit object with a checksum issue that allows malicious applications to exploit the vulnerability to execute arbitrary code...

PT-2015-5085

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.3 Apple OS X versions prior to 10.10.3 Apple TV versions prior to 7.2 Description The issue allows attackers to execute arbitrary code in a privileged context or cause a denial of service due to memory corruption...

Apple iOS multiple security vulnerabilities

Buffer overflows, DoS, memory corruption, restrictions bypass, weak cryptography...

CVE-2015-1061

IOSurface in Apple iOS before 8.2, Apple OS X through 10.10.2, and Apple TV before 7.1 allows attackers to execute arbitrary code in a privileged context via a crafted app that leverages "type confusion" during serialized-object handling...

Buffer overflow

Multiple buffer overflows in iCloud Keychain in Apple iOS before 8.2 and Apple OS X through 10.10.2 allow man-in-the-middle attackers to execute arbitrary code by modifying the client-server data stream during keychain recovery...

Type confusion

IOSurface in Apple iOS before 8.2, Apple OS X through 10.10.2, and Apple TV before 7.1 allows attackers to execute arbitrary code in a privileged context via a crafted app that leverages "type confusion" during serialized-object handling...

Design/Logic Flaw

MobileStorageMounter in Apple iOS before 8.2 and Apple TV before 7.1 does not delete invalid disk-image folders, which allows attackers to create folders in arbitrary filesystem locations via a crafted app...

Design/Logic Flaw

Springboard in Apple iOS before 8.2 allows physically proximate attackers to bypass an intended activation requirement and read the home screen by leveraging an application crash during the activation process...

CVE-2015-1063

CoreTelephony in Apple iOS before 8.2 allows remote attackers to cause a denial of service NULL pointer dereference and device restart via a Class 0 SMS message...

CVE-2015-1061

CVE-2015-1061 concerns IOSurface: a type confusion flaw in handling serialized objects that could allow a crafted app to execute arbitrary code with system/privileged privileges across Apple iOS versions prior to 8.2, OS X up to 10.10.2, and Apple TV before 7.1. The issue was addressed by Apple S...