CVE-2015-3750

WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, as used in iOS before 8.4.1 and other products, does not enforce the HTTP Strict Transport Security HSTS protection mechanism for Content Security Policy CSP report requests, which allows man-in-the-middle attackers to...

CVE-2015-3731

CVE-2015-3731 affects WebKit as used in Apple iOS < 8.4.1 and Safari < 6.2.8, 7.x < 7.1.8, and 8.x

CVE-2015-3741

CVE-2015-3741 affects WebKit as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. Root c...

CVE-2015-3737

WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVE...

CVE-2015-3735

CVE-2015-3735 affects WebKit as used in Apple iOS (before 8.4.1) and Safari (before 6.2.8; 7.x before 7.1.8; 8.x before 8.0.8). The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site, via memory corruption leading to an app crash. C...

CVE-2015-3750

CVE-2015-3750 concerns WebKit in WebKit-based components (e.g., Apple Safari, WebKit2) where Content Security Policy report requests did not have enforceable HTTP Strict Transport Security (HSTS). The failing behavior allowed a MITM to sniff sensitive data or spoof CSP report data, including cook...

CVE-2015-3736

CVE-2015-3736 affects WebKit as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8. The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site, due to memory corruption. Public details in the provided...

CVE-2015-3749

WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVE...

CVE-2015-3743

CVE-2015-3743 is a WebKit vulnerability affecting Apple WebKit used by iOS Safari (and related WebKit builds). The issue allows remote attackers to run arbitrary code or cause memory corruption and application crashes via a crafted web site. Affected products/versions are listed in the descriptio...

CVE-2015-3733

CVE-2015-3733 is a WebKit memory-corruption/remote-code-execution issue present in WebKit as used by Apple iOS prior to 8.4.1 and Safari prior to 6.2.8, 7.x prior to 7.1.8, and 8.x prior to 8.0.8. The root cause is memory corruption triggered by complex crafted web content, which can lead to arbi...

CVE-2015-3735

WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVE...

CVE-2015-3733

WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVE...

CVE-2015-3744

WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVE...

CVE-2015-3738

WebKit vulnerability in Apple software: remote code execution or memory corruption/DoS via a crafted website. Affected: WebKit as used in iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8. Root cause described as memory corruption leading to app crash; no remediatio...

CVE-2015-3751

CVE-2015-3751 affects WebKit in Safari (and iOS) prior to versions 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8. The vulnerability allows remote attackers to bypass a Content Security Policy protection by exploiting a video control in conjunction with an IMG element within an OBJECT element. Exp...

CVE-2015-3737

CVE-2015-3737 affects WebKit (as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8) and allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site (memory corruption and app crash). Public references indicate ...

CVE-2015-3743

WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVE...

CVE-2015-3745

CVE-2015-3745 involves WebKit used in Apple iOS before 8.4.1 and Safari before 6.2.8, and versions 7.x before 7.1.8, 8.x before 8.0.8. The vulnerability allows a remote attacker to run arbitrary code or cause a denial of service through a crafted web site, via memory corruption and application cr...

CVE-2015-3747

CVE-2015-3747 affects WebKit used in Apple iOS (pre-8.4.1) and Safari (pre-6.2.8, 7.x pre-7.1.8, 8.x pre-8.0.8). A crafted website could trigger remote code execution or memory corruption leading to application crash (denial of service). Root cause is memory corruption in WebKit components expose...

CVE-2015-3753

CVE-2015-3753 affects WebKit used in Apple Safari (before 6.2.8, before 7.1.8 for 7.x, and before 8.0.8 for 8.x; on iOS prior to 8.4.1). The root cause is improper taint checking for CANVAS elements, which could allow remote attackers to bypass the Same Origin Policy and exfiltrate sensitive imag...