CVE-2015-1122

CVE-2015-1122 is a WebKit/Apple WebKitGTK family vulnerability affecting WebKit components used in Apple iOS, tvOS, Safari and the WebKitGTK stack on Linux distributions. The related connected advisories and Nessus/OpenVAS entries show that CVE-2015-1122 was addressed in several vendor updates (e...

CVE-2015-1123

WebKit, as used in Apple iOS before 8.3 and Apple TV before 7.2, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-04-08-3 and...

CVE-2015-1114

The CVE-2015-1114 issue affects Apple iOS prior to 8.3 and Apple TV prior to 7.2, where the Sandbox Profiles component could disclose hardware identifiers to third‑party apps. Root cause: information disclosure via the Sandbox third‑party profile. Impact: hardware identifiers exposed to potential...

CVE-2015-1096

IOHIDFamily in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 allows attackers to obtain sensitive information about kernel memory via a crafted app...

CVE-2015-1123

CVE-2015-1123 affects WebKit as used in Apple iOS before 8.3 and Apple TV before 7.2. The description states that a crafted website can cause remote code execution or a denial of service (memory corruption and application crash). The root cause is memory corruption in WebKit leading to either arb...

CVE-2015-1092

CVE-2015-1092 refers to an XML External Entity (XXE) issue in NSXMLParser within Foundation used by Apple iOS before 8.3 and Apple TV before 7.2. The vulnerability allows remote attackers to read arbitrary files via an external entity declaration combined with an entity reference. Apple’s advisor...

CVE-2015-1114

The Sandbox Profiles component in Apple iOS before 8.3 and Apple TV before 7.2 allows attackers to discover hardware identifiers via a crafted app...

CVE-2015-1118

libnetcore in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 allows attackers to cause a denial of service memory corruption and application crash via a crafted configuration profile...

CVE-2015-1094

The connected WatchOS advisory (APPLE-SA-2015-05-19-1) confirms CVE-2015-1094 affects IOAcceleratorFamily and could allow a malicious app to disclose kernel memory. Description: the issue caused kernel memory disclosure and was mitigated by removing unneeded code in IOAcceleratorFamily; the fix i...

CVE-2015-1102

CVE-2015-1102 affects the Apple kernel in iOS before 8.3, OS X before 10.10.3, and Apple TV before 7.2, where improper handling of TCP headers can be exploited to cause a denial of service via unspecified vectors. The vulnerability allows a MITM-style condition that can crash or stall the device ...

CVE-2015-1095

CVE-2015-1095 affects IOHIDFamily in Apple iOS (before 8.3), OS X (before 10.10.3), and Apple TV (before 7.2). A physically proximate attacker can use a crafted HID device to trigger memory corruption, potentially arbitrary code execution or a denial of service. The description indicates the vuln...

CVE-2015-1100

The kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 allows attackers to cause a denial of service out-of-bounds memory access or obtain sensitive memory-content information via a crafted app...

CVE-2015-1096

IOHIDFamily in Apple iOS before 8.3, OS X before 10.10.3, and Apple TV before 7.2 contains a memory‑disclosure issue that allows a crafted app to obtain kernel memory information. The vulnerability is attributed to IOHIDFamily and is described as a memory corruption/memory disclosure risk; Apple’...

CVE-2015-1104

The CVE-2015-1104 entry affects Apple’s kernel components in iOS (before 8.3), OS X (before 10.10.3), and Apple TV (before 7.2). The issue is an IPv6 handling flaw where the kernel does not reliably determine whether an IPv6 packet has a local origin, enabling a remote attacker to bypass a networ...

CVE-2015-1117

The 1 setreuid and 2 setregid system-call implementations in the kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 do not properly perform privilege drops, which makes it easier for attackers to execute code with unintended user or group privileges via a crafted a...

CVE-2015-1101

CVE-2015-1101 affects Apple iOS < 8.3, OS X < 10.10.3, and Apple TV

CVE-2015-1095

IOHIDFamily in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 allows physically proximate attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted HID device...

CVE-2015-1100

CVE-2015-1100 affects the Mac OS X kernel before 10.10.3, iOS before 8.3, and Apple TV before 7.2, due to a missing limit check in the fat loader of the Mac OS X kernel. This causes out-of-bounds memory access, enabling local denial of service or potential memory-content leakage when a crafted pa...

CVE-2015-1104

The kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 does not properly determine whether an IPv6 packet had a local origin, which allows remote attackers to bypass an intended network-filtering protection mechanism via a crafted packet...

CVE-2015-1097

CVE-2015-1097 affects IOMobileFramebuffer in Apple iOS (before 8.3) and Apple TV (before 7.2). The issue allows a crafted app to disclose sensitive information from kernel memory due to a memory-disclosure vulnerability in MobileFrameBuffer, as described in the CVE entry. The Apple iOS 8.3 and Ap...