CVE-2015-7055

AppleMobileFileIntegrity in Apple iOS before 9.2 and tvOS before 9.1 does not prevent changes to access-control structures, which allows attackers to execute arbitrary code in a privileged context via a crafted app...

CVE-2015-7079

dyld in Apple iOS before 9.2 and tvOS before 9.1 mishandles segment validation, which allows attackers to execute arbitrary code in a privileged context via a crafted app...

CVE-2015-7051

CVE-2015-7051 affects Apple iOS before 9.2 and tvOS before 9.1, where MobileStorageMounter mishandles trust-cache loading timing, allowing arbitrary code execution in a privileged context via a crafted app. Connected documents reiterate the vulnerability across multiple feeds (NVD, CNVD, CNVD/CVE...

CVE-2015-7069: Undefined Security Weakness

Mobile Replayer in GPUTools Framework in Apple iOS before 9.2 allows attackers to execute arbitrary code in a privileged context via an app that provides a crafted pathname, a different vulnerability than CVE-2015-7070...

CVE-2015-7079: Improper Input Validation

dyld in Apple iOS before 9.2 and tvOS before 9.1 mishandles segment validation, which allows attackers to execute arbitrary code in a privileged context via a crafted app...

PT-2015-2937

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.2 tvOS versions prior to 9.1 Description The issue is related to insufficient access control in the AppleMobileFileIntegrity component of the iOS operating system. This can be exploited by a remote attacker using ...

PT-2015-2934

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.2 Description The issue is related to errors in the code of the Mobile Replayer component in the GPUTools Framework. It allows attackers to execute arbitrary code in a privileged context via an app that provides a...

PT-2015-3130

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.2 Apple tvOS versions prior to 9.1 Description The issue exists due to insufficient input validation in the dyld component of the iOS operating system. This can be exploited by a remote attacker using a specially...

CVE-2015-7055: Improper Access Control

AppleMobileFileIntegrity in Apple iOS before 9.2 and tvOS before 9.1 does not prevent changes to access-control structures, which allows attackers to execute arbitrary code in a privileged context via a crafted app...

PT-2015-3107

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.11.2 Description The issue is related to errors in security settings of the System Integrity Protection feature. It may allow a remote attacker to execute arbitrary code in a privileged context using a specially...

CVE-2015-7051: Undefined Security Weakness

MobileStorageMounter in Apple iOS before 9.2 and tvOS before 9.1 mishandles the timing of trust-cache loading, which allows attackers to execute arbitrary code in a privileged context via a crafted app...

CVE-2015-7070: Undefined Security Weakness

Mobile Replayer in GPUTools Framework in Apple iOS before 9.2 allows attackers to execute arbitrary code in a privileged context via an app that provides a crafted pathname, a different vulnerability than CVE-2015-7069...

CVE-2015-6139: Undefined Security Weakness

Microsoft Internet Explorer 11 and Microsoft Edge mishandle content types, which allows remote attackers to execute arbitrary web script in a privileged context via a crafted web site, aka "Microsoft Browser Elevation of Privilege Vulnerability."...

PT-2015-2992

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer version 11 Microsoft Edge affected versions not specified Description The issue is related to the mishandling of content types by the browsers, which allows remote attackers to execute arbitrary web script in a...

SUSE: Security Advisory for Mozilla (SUSE-SU-2015:0593-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-5866

IOHIDFamily in Apple OS X before 10.11 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

Memory corruption

dyld in Dev Tools in Apple iOS before 9 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

CVE-2015-5846: Improper Restriction of Operations within the Bounds of a Memory Buffer

IOKit in the kernel in Apple iOS before 9 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app, a different vulnerability than CVE-2015-5844 and CVE-2015-5845...

CVE-2015-5844: Improper Restriction of Operations within the Bounds of a Memory Buffer

IOKit in the kernel in Apple iOS before 9 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app, a different vulnerability than CVE-2015-5845 and CVE-2015-5846...

Vulnerabilities of iOS and Mac OS X operating systems, allowing attackers to execute arbitrary code in a privileged context

The vulnerability of the kernel in iOS and Mac OS X operating systems is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code in a privileged context remotely...