CVE-2015-7042

The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to cause a denial of service via a crafted app, a different vulnerability than CVE-2015-7040, CVE-2015-7041, and CVE-2015-7043...

CVE-2015-7041

The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to cause a denial of service via a crafted app, a different vulnerability than CVE-2015-7040, CVE-2015-7042, and CVE-2015-7043...

Design/Logic Flaw

The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to cause a denial of service via a crafted app, a different vulnerability than CVE-2015-7040, CVE-2015-7041, and CVE-2015-7042...

Design/Logic Flaw

The System Integrity Protection feature in Apple OS X before 10.11.2 mishandles union mounts, which allows attackers to execute arbitrary code in a privileged context via a crafted app with root privileges...

Design/Logic Flaw

dyld in Apple iOS before 9.2 and tvOS before 9.1 mishandles segment validation, which allows attackers to execute arbitrary code in a privileged context via a crafted app...

Design/Logic Flaw

Apple iOS before 9.2, OS X before 10.11.2, and tvOS before 9.1 improperly validate keychain item ACLs, which allows attackers to obtain access to keychain items via a crafted app...

CVE-2015-7046

The Sandbox feature in xnu in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 does not properly implement privilege separation, which allows attackers to bypass the ASLR protection mechanism via a crafted app with root privileges...

CVE-2015-7041

The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to cause a denial of service via a crafted app, a different vulnerability than CVE-2015-7040, CVE-2015-7042, and CVE-2015-7043...

CVE-2015-7051

MobileStorageMounter in Apple iOS before 9.2 and tvOS before 9.1 mishandles the timing of trust-cache loading, which allows attackers to execute arbitrary code in a privileged context via a crafted app...

CVE-2015-7055

AppleMobileFileIntegrity in Apple iOS before 9.2 and tvOS before 9.1 does not prevent changes to access-control structures, which allows attackers to execute arbitrary code in a privileged context via a crafted app...

CVE-2015-7043

The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to cause a denial of service via a crafted app, a different vulnerability than CVE-2015-7040, CVE-2015-7041, and CVE-2015-7042...

CVE-2015-7041

Technical details about CVE-2015-7041 are not publicly provided in the connected documents. The initial entry notes a denial-of-service risk in Apple OS/iOS/watchOS/tvOS prior to certain versions, but no concrete vendor/product/version specifics or fixes are included here; monitor for updates.

CVE-2015-7072

dyld in Apple iOS before 9.2, tvOS before 9.1, and watchOS before 2.1 mishandles segment validation, which allows attackers to execute arbitrary code in a privileged context via a crafted app...

Android SystemUI Elevation of Privilege Vulnerability

Android is a cell phone operating system based on the Linux open kernel. Android versions prior to 5.1.1 LMY48Z and 6.0 2015-12-01, SystemUI has a security vulnerability in its implementation, which can be exploited by remote attackers to elevate privileges via a constructed application...

Android kernel elevation of privilege vulnerability

Android is a cell phone operating system based on the Linux open kernel. The kernel in versions prior to Android 5.1.1 LMY48Z and 6.0 2015-12-01 has a security vulnerability in its implementation, which can be exploited by remote attackers to gain elevated privileges via a constructed application...

Cisco WebEx Meetings for Android Access Bypass Vulnerability

Cisco WebEx Meetings for Android are a set of web-based online meeting applications for the WebEx Meetings solution from Cisco USA based on the Android platform. A security vulnerability exists in Cisco WebEx Meetings for Android versions prior to 8.5.1, which can be exploited by an attacker to...

Input validation

The kernel in Apple iOS before 8.4.1 does not properly restrict debugging features, which allows attackers to bypass background-execution limitations via a crafted app...

CVE-2015-5787

The kernel in Apple iOS before 8.4.1 does not properly restrict debugging features, which allows attackers to bypass background-execution limitations via a crafted app...

The vulnerability of the iOS operating system, which allows a hacker to gain access to information about the calls made

The vulnerability of the Telephony subsystem in the iOS operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to information about made calls through a specially crafted application...

The vulnerability of the iOS operating system, which allows a hacker to trigger a service failure

The vulnerability of the iOS operating system’s kernel exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures through a specially crafted application...