CVE-2015-1086

Apple iOS vulnerability CVE-2015-1086 affects the Audio Drivers subsystem due to improper validation of IOKit object metadata, allowing a crafted app to execute arbitrary code with system privileges. Affected products include iOS prior to 8.3 and Apple TV prior to 7.2. Root cause: metadata valida...

CVE-2015-1092

NSXMLParser in Foundation in Apple iOS before 8.3 and Apple TV before 7.2 allows remote attackers to read arbitrary files via an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...

CVE-2015-1122

WebKit, as used in Apple iOS before 8.3, Apple TV before 7.2, and Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different...

CVE-2015-1110

The CVE-2015-1110 issue affects the Podcasts component in Apple iOS before 8.3 and Apple TV before 7.2. The root cause is disclosure of unique identifiers via asset-download request data when downloading podcast assets. Impact is information disclosure (partial confidentiality). Remediation is ap...

CVE-2015-1124

WebKit, as used in Apple iOS before 8.3, Apple TV before 7.2, and Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different...

CVE-2015-1101

The kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

CVE-2015-1099

Race condition in the setreuid system-call implementation in the kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 allows attackers to cause a denial of service via a crafted app...

CVE-2015-1117

CVE-2015-1117 affects Apple platforms: iOS before 8.3, OS X before 10.10.3, and Apple TV before 7.2. The kernel setreuid/setregid system-call implementations fail to drop privileges, enabling code execution with unintended user/group privileges via a crafted app. Remediation is to upgrade to the ...

CVE-2015-1103

The CVE-2015-1103 entry covers a kernel-level issue in Apple devices (iOS before 8.3, OS X before 10.10.3, Apple TV before 7.2): ICMP_REDIRECT handling allows remote attackers to cause a denial of service (network outage) or to obtain sensitive packet content via a crafted ICMP packet. The descri...

CVE-2015-1094

IOAcceleratorFamily in Apple iOS before 8.3 and Apple TV before 7.2 allows attackers to obtain sensitive information about kernel memory via a crafted app...

CVE-2015-1118

libnetcore in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 allows attackers to cause a denial of service memory corruption and application crash via a crafted configuration profile...

CVE-2015-1095

CVE-2015-1095 affects IOHIDFamily in Apple iOS (before 8.3), OS X (before 10.10.3), and Apple TV (before 7.2). A physically proximate attacker can use a crafted HID device to trigger memory corruption, potentially arbitrary code execution or a denial of service. The description indicates the vuln...

CVE-2015-1123

WebKit, as used in Apple iOS before 8.3 and Apple TV before 7.2, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-04-08-3 and...

CVE-2015-1122

CVE-2015-1122 is a WebKit/Apple WebKitGTK family vulnerability affecting WebKit components used in Apple iOS, tvOS, Safari and the WebKitGTK stack on Linux distributions. The related connected advisories and Nessus/OpenVAS entries show that CVE-2015-1122 was addressed in several vendor updates (e...

CVE-2015-1096

IOHIDFamily in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 allows attackers to obtain sensitive information about kernel memory via a crafted app...

CVE-2015-1114

The CVE-2015-1114 issue affects Apple iOS prior to 8.3 and Apple TV prior to 7.2, where the Sandbox Profiles component could disclose hardware identifiers to third‑party apps. Root cause: information disclosure via the Sandbox third‑party profile. Impact: hardware identifiers exposed to potential...

CVE-2015-1094

The connected WatchOS advisory (APPLE-SA-2015-05-19-1) confirms CVE-2015-1094 affects IOAcceleratorFamily and could allow a malicious app to disclose kernel memory. Description: the issue caused kernel memory disclosure and was mitigated by removing unneeded code in IOAcceleratorFamily; the fix i...

CVE-2015-1114

The Sandbox Profiles component in Apple iOS before 8.3 and Apple TV before 7.2 allows attackers to discover hardware identifiers via a crafted app...

CVE-2015-1092

CVE-2015-1092 refers to an XML External Entity (XXE) issue in NSXMLParser within Foundation used by Apple iOS before 8.3 and Apple TV before 7.2. The vulnerability allows remote attackers to read arbitrary files via an external entity declaration combined with an entity reference. Apple’s advisor...

CVE-2015-1123

CVE-2015-1123 affects WebKit as used in Apple iOS before 8.3 and Apple TV before 7.2. The description states that a crafted website can cause remote code execution or a denial of service (memory corruption and application crash). The root cause is memory corruption in WebKit leading to either arb...