CVE-2015-5808

CVE-2015-5808 affects WebKit as used by Apple iTunes before 12.3. Root cause: WebKit vulnerability that can be triggered via iTunes Store browsing, enabling a man-in-the-middle to execute arbitrary code or cause memory corruption and application crash (DoS). Impact is partial confidentiality/inte...

CVE-2015-5815

WebKit, as used in Apple iTunes before 12.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in...

CVE-2015-5819

WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...

CVE-2015-5826

CVE-2015-5826 affects WebKit on iOS prior to 9. The issue arises when cross-origin stylesheets are loaded with non-CSS MIME types, enabling cross-origin data exfiltration and bypass of same-origin policies. Public docs confirm the CVE is tied to Safari/WebKit and was addressed in iOS 9/Safari 9 u...

CVE-2015-5804

CVE-2015-5804 affects WebKit as used by Apple iOS (pre-9) and iTunes (pre-12.3). The vulnerability enables remote attackers to execute arbitrary code or cause a denial of service via a crafted web site due to memory corruption in WebKit. Public documents in the connected set show that Linux/Magei...

CVE-2015-5794

CVE-2015-5794 refers to a WebKit vulnerability affecting Apple iOS prior to 9 and iTunes prior to 12.3. A crafted web site can cause memory corruption, allowing remote attackers to execute arbitrary code or cause a denial of service (application crash). This is described as a distinct vulnerabili...

CVE-2015-5792

WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...

CVE-2015-5825

CVE-2015-5825 is associated with WebKit/Safari (iOS

CVE-2015-5907

WebKit in Apple iOS before 9 allows man-in-the-middle attackers to conduct redirection attacks by leveraging the mishandling of the resource cache of an SSL web site with an invalid X.509 certificate...

CVE-2015-5815

CVE-2015-5815 affects WebKit as used in Apple iTunes prior to version 12.3. The vulnerability arises in iTunes Store browsing vectors, allowing a man-in-the-middle attacker to cause memory corruption, leading to arbitrary code execution or a denial of service (application crash). The description ...

CVE-2015-5806

CVE-2015-5806 affects WebKit as used in Apple iOS before 9 and iTunes before 12.3. A crafted web site can trigger a memory corruption that may allow remote code execution or cause a denial of service (application crash). The vulnerability is tied to WebKit’s handling of certain content, with the ...

CVE-2015-5816

WebKit, as used in JavaScriptCore in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in...

CVE-2015-5810

WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...

CVE-2015-5821

WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...

CVE-2015-5814

WebKit, as used in JavaScriptCore in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in...

CVE-2015-5793

WebKit, as used in JavaScriptCore in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in...

CVE-2015-5823

WebKit, as used in JavaScriptCore in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in...

CVE-2015-5795

WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...

CVE-2015-5820

CVE-2015-5820 affects WebKit in Apple iOS prior to iOS 9. A crafted tel://, facetime://, or facetime-audio:// URL can trigger a dialing action, enabling remote dialing via web content. The documentation specifies the vulnerability arises from WebKit/URL handling; exploits or in‑the‑wild details a...

CVE-2015-5814

CVE-2015-5814 affects WebKit as used by JavaScriptCore in Apple iOS (pre-9) and iTunes (pre-12.3). The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site, due to memory corruption that can crash the application. The provided documen...