CVE-2015-7040

CVE-2015-7040 affects the kernel in Apple iOS (<9.2), OS X (<10.11.2), tvOS (<9.1), and watchOS (

CVE-2015-7097

Technical details for CVE-2015-7097 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2015-7096

WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than CVE-2015-7048, CVE-2015-7095, CVE-2015-7097,...

CVE-2015-7102

Technical details about CVE-2015-7102 are not provided in the connected documents; no affected products, versions, or fixes are specified. Monitor for updates from official sources.

CVE-2015-7054

CVE-2015-7054 affects Apple platforms via the zlib component in the Compression subsystem (iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, watchOS before 2.1). The vulnerability arises because memory is not initialized for an unspecified data structure, allowing remote attackers to execute ...

CVE-2015-7110

The CVE-2015-7110 entry concerns Apple OS X Disk Images handling prior to 10.11.2 and tvOS prior to 9.1. A crafted disk image can trigger memory corruption in the Disk Images component, allowing local users to gain privileges or cause a denial of service. Affected software/versions are explicitly...

CVE-2015-7055

AppleMobileFileIntegrity in Apple iOS before 9.2 and tvOS before 9.1 does not prevent changes to access-control structures, which allows attackers to execute arbitrary code in a privileged context via a crafted app...

CVE-2015-7099

Technical details about CVE-2015-7099 are not publicly available in the provided documents. No specific affected product versions, root cause, or remediation are disclosed here. Monitor for updates from official advisories.

CVE-2015-7041

Technical details about CVE-2015-7041 are not publicly provided in the connected documents. The initial entry notes a denial-of-service risk in Apple OS/iOS/watchOS/tvOS prior to certain versions, but no concrete vendor/product/version specifics or fixes are included here; monitor for updates.

CVE-2015-7048

WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than CVE-2015-7095, CVE-2015-7096, CVE-2015-7097,...

CVE-2015-7038

Based on connected documents, CVE-2015-7038 is a buffer overflow in Apple’s libc affecting iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1. The underlying issue is a libc buffer overflow that allows remote code execution via a crafted package. No specific patch/versio...

CVE-2015-7046

The CVE-2015-7046 issue affects Apple’s OS X/iOS/tvOS/watchOS: the Sandbox in xnu does not properly enforce privilege separation, allowing a crafted app with root privileges to bypass ASLR. Affected: iOS prior to 9.2, OS X prior to 10.11.2, tvOS prior to 9.1, watchOS prior to 2.1. Impact stated i...

CVE-2015-7065

OpenGL in Apple iOS before 9.2, OS X before 10.11.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site...

CVE-2015-7111

The IOHIDFamily API in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app, a different vulnerability than CVE-2015-7112...

CVE-2015-7053

This CVE (CVE-2015-7053) concerns ImageIO in Apple platforms: iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1. The root cause is memory corruption in ImageIO triggered by a crafted image, allowing remote attackers to execute arbitrary code or cause a denial of service...

CVE-2015-7104

Concrete details available: CVE-2015-7104 affects WebKit/Apple WebKit components. The vulnerability is described as memory corruption that can lead to arbitrary code execution or a denial of service when a crafted web site is loaded, affecting Apple Safari versions prior to 9.0.2 and tvOS prior t...

CVE-2015-7038

Buffer overflow in libc in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code via a crafted package, a different vulnerability than CVE-2015-7039...

CVE-2015-7053

ImageIO in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted image...

CVE-2015-7058

Apple iOS before 9.2, OS X before 10.11.2, and tvOS before 9.1 improperly validate keychain item ACLs, which allows attackers to obtain access to keychain items via a crafted app...

CVE-2015-7109

CVE-2015-7109 affects IOAcceleratorFamily in Apple OS X before 10.11.2 and tvOS before 9.1. The vulnerability allows an attacker-crafted app to execute arbitrary code in a privileged context or cause a denial of service via memory corruption. The description in the provided sources confirms the r...