CVE-2015-7073

Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted SSL handshake...

CVE-2015-7051

CVE-2015-7051 affects Apple iOS before 9.2 and tvOS before 9.1, where MobileStorageMounter mishandles trust-cache loading timing, allowing arbitrary code execution in a privileged context via a crafted app. Connected documents reiterate the vulnerability across multiple feeds (NVD, CNVD, CNVD/CVE...

CVE-2015-7060

CVE-2015-7060 targets Apple platforms with vulnerable ASN.1 decoding in OS X (pre-10.11.2), tvOS (pre-9.1), and watchOS (pre-2.1). A crafted certificate can trigger remote code execution or memory corruption (DoS). Root cause: ASN.1 decoder weakness. Affected components: OS X’s certificate handli...

CVE-2015-7065

OpenGL in Apple iOS before 9.2, OS X before 10.11.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site...

CVE-2015-7084

CVE-2015-7084 affects Apple iOS <9.2, OS X <10.11.2, tvOS <9.1, and watchOS

CVE-2015-7104

Concrete details available: CVE-2015-7104 affects WebKit/Apple WebKit components. The vulnerability is described as memory corruption that can lead to arbitrary code execution or a denial of service when a crafted web site is loaded, affecting Apple Safari versions prior to 9.0.2 and tvOS prior t...

CVE-2015-7110

The CVE-2015-7110 entry concerns Apple OS X Disk Images handling prior to 10.11.2 and tvOS prior to 9.1. A crafted disk image can trigger memory corruption in the Disk Images component, allowing local users to gain privileges or cause a denial of service. Affected software/versions are explicitly...

CVE-2015-7047

CVE-2015-7047 is a local privilege-escalation vulnerability affecting Apple platforms: iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1. The issue arises from a crafted mach message that is misparsed by the kernel, enabling a local user to gain privileges. Public explo...

CVE-2015-7075

CoreMedia Playback in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a malformed media file...

CVE-2015-7040

CVE-2015-7040 affects the kernel in Apple iOS (<9.2), OS X (<10.11.2), tvOS (<9.1), and watchOS (

CVE-2015-7083

Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 are affected by CVE-2015-7083, allowing local privilege escalation or memory corruption. Connected sources confirm affected platforms/versions; no root-cause or exact vectors are provided in the documents. Mitigati...

CVE-2015-7103

Technical details for CVE-2015-7103 are not publicly available in the provided connected/documents. Monitor for updates from official advisories; no confirmed affected products, exploitation status, or remediation details are provided here.

CVE-2015-7075

CVE-2015-7075 affects CoreMedia Playback across Apple platforms: iOS <9.2, OS X <10.11.2, tvOS <9.1, and watchOS

CVE-2015-7043

Technical details for CVE-2015-7043 are not publicly available in the provided documents; monitor for updates.

CVE-2015-7054

CVE-2015-7054 affects Apple platforms via the zlib component in the Compression subsystem (iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, watchOS before 2.1). The vulnerability arises because memory is not initialized for an unspecified data structure, allowing remote attackers to execute ...

CVE-2015-7066

CVE-2015-7066 affects OpenGL in Apple software: iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1. A crafted web site can trigger memory corruption, enabling remote code execution or a denial of service. Root cause is memory corruption in OpenGL as described; the initia...

CVE-2015-7041

Technical details about CVE-2015-7041 are not publicly provided in the connected documents. The initial entry notes a denial-of-service risk in Apple OS/iOS/watchOS/tvOS prior to certain versions, but no concrete vendor/product/version specifics or fixes are included here; monitor for updates.

CVE-2015-7055

Apple MobileFileIntegrity in iOS before 9.2 and tvOS before 9.1 fails to block changes to access-control structures, enabling arbitrary code execution in a privileged context via a crafted app. Affected: Apple iOS, tvOS; component: AppleMobileFileIntegrity. Root cause: inadequate enforcement of a...

CVE-2015-7079

CVE-2015-7079 affects Apple iOS before 9.2 and tvOS before 9.1, with the vulnerability in dyld caused by mishandling segment validation. The CNVD-2015-08185 description states a segment checksum vulnerability in iOS dyld that enables an attacker to execute arbitrary code with system privileges vi...

CVE-2015-7043

The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to cause a denial of service via a crafted app, a different vulnerability than CVE-2015-7040, CVE-2015-7041, and CVE-2015-7042...