CVE-2015-5825

WebKit in Apple iOS before 9 does not properly restrict the availability of Performance API times, which allows remote attackers to obtain sensitive information about the browser history, mouse movement, or network traffic via crafted JavaScript code...

CVE-2015-5810

WebKit vulnerability CVE-2015-5810 affects Apple’s WebKit used in iOS prior to 9 and iTunes prior to 12.3. A crafted website can remotely trigger memory corruption to execute arbitrary code or cause a denial of service (application crash). The issue is described as a distinct vulnerability from o...

CVE-2015-5796

CVE-2015-5796 concerns WebKit as used in Apple iOS before 9 and iTunes before 12.3. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, distinct from other WebKit CVEs cited by Apple. Th...

CVE-2015-5822

WebKit, as used in JavaScriptCore in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in...

CVE-2015-5817

WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...

CVE-2015-5906

The HTML form implementation in WebKit in Apple iOS before 9 does not prevent QuickType access to the final character of a password, which might make it easier for remote attackers to discover a password by leveraging a later prediction containing that character...

CVE-2015-5813

CVE-2015-5813 targets WebKit as used in Apple iOS prior to 9 and iTunes prior to 12.3, enabling remote code execution or a memory-corruption–based DoS via a crafted website. Public disclosures in the connected records show downstream patches: Mageia webkit2 updates (to 2.10.9), Fedora/openSUSE ad...

CVE-2015-5815

WebKit, as used in Apple iTunes before 12.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in...

CVE-2015-5820

WebKit in Apple iOS before 9 allows remote attackers to trigger a dialing action via a crafted 1 tel://, 2 facetime://, or 3 facetime-audio:// URL...

CVE-2015-5819

WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...

CVE-2015-5808

WebKit, as used in Apple iTunes before 12.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in...

CVE-2015-5801

CVE-2015-5801 concerns WebKit as used in Apple iOS before 9 and iTunes before 12.3. A crafted web site could cause remote code execution or a denial of service via memory corruption, leading to an application crash. The vulnerability is triggered through WebKit’s handling of web content, and is d...

CVE-2015-5801

WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...

CVE-2015-5799

WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...

CVE-2015-5802

WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...

CVE-2015-5797

WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...

CVE-2015-5796

WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...

CVE-2015-5818

CVE-2015-5818 affects WebKit used in Apple iOS before 9 and iTunes before 12.3. A crafted website can trigger a vulnerability that may allow remote code execution or cause a denial of service through memory corruption and application crashes. The provided documents do not specify the exact root c...

CVE-2015-5808

CVE-2015-5808 affects WebKit as used by Apple iTunes before 12.3. Root cause: WebKit vulnerability that can be triggered via iTunes Store browsing, enabling a man-in-the-middle to execute arbitrary code or cause memory corruption and application crash (DoS). Impact is partial confidentiality/inte...

CVE-2015-5793

CVE-2015-5793 affects WebKit/JavaScriptCore used in Apple iOS before 9 and iTunes before 12.3. It allows remote attackers to execute arbitrary code or cause memory corruption and app crashes via a crafted web site. The provided documents do not specify the exact patch version or remediation detai...