CVE-2015-5935

CVE-2015-5935 affects ImageIO in Apple iOS ≤9.0 (fixed in 9.1), OS X ≤10.11 (fixed in 10.11.1), and watchOS ≤2.0.0 (fixed in 2.0.1). The root cause is memory corruption caused by crafted image metadata, enabling remote code execution or a denial of service. Remediation involves upgrading to the f...

CVE-2015-5936

ImageIO in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via crafted metadata in an image, a different vulnerability than CVE-2015-5935, CVE-2015-5937, and CVE-2015-5939...

CVE-2015-5939

CVE-2015-5939 affects Apple ImageIO in iOS (pre-9.1), OS X (pre-10.11.1), and watchOS (pre-2.0.1). The vulnerability allows remote attackers to trigger arbitrary code execution or a denial of service via crafted metadata embedded in an image, resulting in memory corruption. The accompanying conne...

CVE-2015-5942

CVE-2015-5942 affects Apple consumer platforms via the FontParser component. The vulnerability exists in iOS versions prior to 9.1, OS X prior to 10.11.1, and watchOS prior to 2.0.1, where processing a crafted font file can lead to remote code execution or a denial of service due to memory corrup...

CVE-2015-6989

Grand Central Dispatch vulnerability CVE-2015-6989 affects Apple iOS prior to 9.1, OS X prior to 10.11.1, and watchOS prior to 2.0.1. The root cause is a memory corruption issue in the handling of dispatch calls, which can lead to arbitrary code execution or memory corruption when processing a cr...

CVE-2015-5927

FontParser in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font file, a different vulnerability than CVE-2015-5942...

CVE-2015-5937

ImageIO in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via crafted metadata in an image, a different vulnerability than CVE-2015-5935, CVE-2015-5936, and CVE-2015-5939...

CVE-2015-6974

CVE-2015-6974 affects IOHIDFamily in Apple iOS (pre-9.1), OS X (pre-10.11.1), and watchOS (pre-2.0.1). Root cause is a memory corruption vulnerability in IOHIDFamily that can be triggered by a crafted app, allowing arbitrary code execution in a privileged context or contributing to a denial of se...

CVE-2015-5926

CVE-2015-5926 affects Apple’s CoreGraphics in iOS <9.1, OS X <10.11.1, and watchOS

CVE-2015-6996

IOAcceleratorFamily in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted app...

CVE-2015-6989: Improper Restriction of Operations within the Bounds of a Memory Buffer

Grand Central Dispatch in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted package that is mishandled during dispatch calls...

CVE-2015-6996: Improper Restriction of Operations within the Bounds of a Memory Buffer

IOAcceleratorFamily in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted app...

CVE-2015-5936: Improper Restriction of Operations within the Bounds of a Memory Buffer

ImageIO in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via crafted metadata in an image, a different vulnerability than CVE-2015-5935, CVE-2015-5937, and CVE-2015-5939...

CVE-2015-5937: Improper Restriction of Operations within the Bounds of a Memory Buffer

ImageIO in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via crafted metadata in an image, a different vulnerability than CVE-2015-5935, CVE-2015-5936, and CVE-2015-5939...

CVE-2015-5926: Improper Restriction of Operations within the Bounds of a Memory Buffer

The CoreGraphics component in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2015-5925...

CVE-2015-6974: Improper Restriction of Operations within the Bounds of a Memory Buffer

IOHIDFamily in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

Apple update the 4 9 patch, Pangu jailbreak uses exploits are fixed-vulnerability warning-the black bar safety net

! 3 weeks ago, Apple fixes the core product of the vulnerability, and released the latest version of OS X, EI Captan system. However on Tuesday and ushered in another wave patch, repair a large number of OS X, iOS, Safari, iTunes, watchOS（smart watchoperating system of the vulnerability. Pangu...

CVE-2015-7006: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the BOM aka Bill of Materials component in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code via a crafted CPIO archive...

CVE-2015-5942: Improper Restriction of Operations within the Bounds of a Memory Buffer

FontParser in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font file, a different vulnerability than CVE-2015-5927...

CVE-2015-5927: Improper Restriction of Operations within the Bounds of a Memory Buffer

FontParser in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font file, a different vulnerability than CVE-2015-5942...