CVE-2015-5812

WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...

CVE-2015-5809

WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...

CVE-2015-5907

CVE-2015-5907 affects WebKit in Apple iOS prior to 9.0. The root cause described is the mishandling of the resource cache for SSL web sites with invalid X.509 certificates, enabling MITM-style redirection attacks. Public narrative across connected documents confirms the same description (iOS

CVE-2015-3801

CVE-2015-3801 affects Apple iOS WebKit’s CFNetwork Cookies: the document.cookie API could be used to bypass a single-cookie restriction in WebKit’s cookie handling, prior to iOS 9. The issue originates in CFNetwork Cookies (WebKit) and is exploitable via unspecified vectors over the network. The ...

CVE-2015-5790

WebKit vulnerability CVE-2015-5790 affects Apple iOS prior to iOS 9 and iTunes prior to 12.3. A crafted web site can trigger remote code execution or cause a denial of service via memory corruption, leading to an application crash. The issue is within the WebKit component used by these products; ...

CVE-2015-5809

CVE-2015-5809 affects WebKit as used in Apple iOS before 9 and iTunes before 12.3, allowing remote code execution or memory-corruption–driven denial of service via a crafted site. Public details in linked advisories confirm WebKit-related fixes in Linux distro packages (e.g., openSUSE webkitgtk u...

CVE-2015-5795

CVE-2015-5795 affects WebKit as used in Apple iOS before 9 and iTunes before 12.3. A crafted web site can cause remote code execution or a denial of service via memory corruption and application crash. The description notes this is a different vulnerability than other WebKit CVEs listed in Apple ...

CVE-2015-5802

CVE-2015-5802 affects WebKit as used in Apple iOS before 9 and iTunes before 12.3. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site due to memory corruption. No explicit fixes or patched versions are provided in the connected ...

CVE-2015-5817

CVE-2015-5817 affects WebKit used in Apple iOS before 9 and iTunes before 12.3. The vulnerability enables a remote attacker to execute arbitrary code or cause a memory corruption/DoS crash via a crafted web site. Public references in OpenVAS/Mageia advisories confirm WebKit/WebKitGTK components a...

CVE-2015-5906

The CVE-2015-5906 issue affects WebKit in Apple iOS up to version 9, where the password input context handling allowed QuickType to infer the last character of a password. This is a WebKit input-context vulnerability that could aid password disclosure. The concrete detail is that the vulnerabilit...

CVE-2015-5819

CVE-2015-5819 affects WebKit as used in Apple iOS before version 9 and iTunes before 12.3. The vulnerability enables remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. Connected advisories indicate that patched...

CVE-2015-5806

WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...

CVE-2015-5816

The CVE-2015-5816 entry concerns WebKit/JavaScriptCore as used in Apple iOS prior to 9 and iTunes prior to 12.3. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted website. The description does n...

CVE-2015-5789

CVE-2015-5789 affects WebKit used in Apple iOS before 9 and iTunes before 12.3. A crafted web site can remotely execute arbitrary code or cause a denial of service due to memory corruption leading to an application crash. The vulnerability is tied to WebKit’s handling of content (no specific comp...

CVE-2015-5822

Public technical details (affected product, vulnerable component, root cause, impact, fixes) are not provided in the connected documents; monitor for updates from vendor advisories.

CVE-2015-5826

WebKit in Apple iOS before 9 does not properly select the cases in which a Cascading Style Sheets CSS document is required to have the text/css content type, which allows remote attackers to bypass the Same Origin Policy via a crafted web site...

CVE-2015-5805

CVE-2015-5805 affects WebKit used in Apple iOS prior to 9 and iTunes prior to 12.3. The description states a remote attacker can host a crafted web site to achieve arbitrary code execution or cause a denial of service via memory corruption and app crash. The provided documents do not specify affe...

CVE-2015-5826

CVE-2015-5826 affects WebKit on iOS prior to 9. The issue arises when cross-origin stylesheets are loaded with non-CSS MIME types, enabling cross-origin data exfiltration and bypass of same-origin policies. Public docs confirm the CVE is tied to Safari/WebKit and was addressed in iOS 9/Safari 9 u...

CVE-2015-5807

WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...

CVE-2015-5791

WebKit, as used in JavaScriptCore in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in...