CVE-2015-5812

CVE-2015-5812 affects WebKit as used in Apple iOS before 9 and iTunes before 12.3. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. The root cause is memory corruption within WebKit l...

CVE-2015-5794

WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...

CVE-2015-5921

CVE-2015-5921 affects WebKit in Apple iOS versions before 9, where the Content-Disposition: attachment HTTP header is mishandled. This could allow a man-in-the-middle to disclose sensitive information via unspecified vectors. The public documentation identifies the issue as a WebKit information‑d...

CVE-2015-5788

The WebKit Canvas implementation in Apple iOS before 9 allows remote attackers to bypass the Same Origin Policy and obtain sensitive image information via vectors involving a CANVAS element...

CVE-2015-5804

CVE-2015-5804 affects WebKit as used by Apple iOS (pre-9) and iTunes (pre-12.3). The vulnerability enables remote attackers to execute arbitrary code or cause a denial of service via a crafted web site due to memory corruption in WebKit. Public documents in the connected set show that Linux/Magei...

CVE-2015-5816

WebKit, as used in JavaScriptCore in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in...

CVE-2015-5823

WebKit, as used in JavaScriptCore in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in...

CVE-2015-5792

WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...

CVE-2015-5793

WebKit, as used in JavaScriptCore in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in...

CVE-2015-5921

WebKit in Apple iOS before 9 mishandles "Content-Disposition: attachment" HTTP headers, which might allow man-in-the-middle attackers to obtain sensitive information via unspecified vectors...

CVE-2015-5814

CVE-2015-5814 affects WebKit as used by JavaScriptCore in Apple iOS (pre-9) and iTunes (pre-12.3). The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site, due to memory corruption that can crash the application. The provided documen...

CVE-2015-5798

CVE-2015-5798 affects WebKit used by Apple iTunes prior to 12.3. The vulnerability arises in iTunes Store browsing and allows a man‑in‑the‑middle to trigger memory corruption and potentially arbitrary code execution or a denial-of-service (application crash). Affected product: Apple iTunes before...

CVE-2015-5798

WebKit, as used in Apple iTunes before 12.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in...

CVE-2015-5907

WebKit in Apple iOS before 9 allows man-in-the-middle attackers to conduct redirection attacks by leveraging the mishandling of the resource cache of an SSL web site with an invalid X.509 certificate...

CVE-2015-5797

CVE-2015-5797 affects WebKit as used in Apple iOS before 9 and iTunes before 12.3. The vulnerability arises from a memory corruption flaw in WebKit that can be triggered by a crafted web site, enabling remote code execution or causing a denial of service (application crash). The available connect...

CVE-2015-5807

CVE-2015-5807 affects WebKit as used in Apple iOS prior to iOS 9 and iTunes prior to 12.3. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. The description notes this is a different v...

CVE-2015-5815

CVE-2015-5815 affects WebKit as used in Apple iTunes prior to version 12.3. The vulnerability arises in iTunes Store browsing vectors, allowing a man-in-the-middle attacker to cause memory corruption, leading to arbitrary code execution or a denial of service (application crash). The description ...

CVE-2015-5795

WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...

CVE-2015-5810

WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...

CVE-2015-5823

CVE-2015-5823 affects WebKit/JavaScriptCore as used in Apple iOS prior to 9 and iTunes prior to 12.3. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. The provided connected documents...