CVE-2015-7038

Based on connected documents, CVE-2015-7038 is a buffer overflow in Apple’s libc affecting iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1. The underlying issue is a libc buffer overflow that allows remote code execution via a crafted package. No specific patch/versio...

CVE-2015-7053

This CVE (CVE-2015-7053) concerns ImageIO in Apple platforms: iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1. The root cause is memory corruption in ImageIO triggered by a crafted image, allowing remote attackers to execute arbitrary code or cause a denial of service...

CVE-2015-7045

The CVE-2015-7045 entry describes a vulnerability in Keychain Access on Apple OS X before 10.11.2 and tvOS before 9.1, where Keychain Access interacts with Keychain Agent in a way that allows an attacker to spoof the Keychain Server via unspecified vectors. Affected software is Apple OS X prior t...

CVE-2015-7062

Technical details for CVE-2015-7062 are not publicly available in the provided documents. Monitor for updates for affected products, vectors, or fixes.

CVE-2015-7001

CVE-2015-7001 affects Apple platforms: iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1. The underlying issue is AppSandbox mishandling hard links, which allows a crafted app to bypass Contacts access revocation. This is the explicit vulnerability described in CVE sour...

CVE-2015-7059

Apple OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 are affected by CVE-2015-7059 via a flaw in the ASN.1 decoder that allows remote attackers to trigger memory corruption or arbitrary code execution through a crafted certificate. The report aggregates multiple CVEs in Apple’s 2015...

CVE-2015-7099

Technical details about CVE-2015-7099 are not publicly available in the provided documents. No specific affected product versions, root cause, or remediation are disclosed here. Monitor for updates from official advisories.

CVE-2015-7055

Apple MobileFileIntegrity in iOS before 9.2 and tvOS before 9.1 fails to block changes to access-control structures, enabling arbitrary code execution in a privileged context via a crafted app. Affected: Apple iOS, tvOS; component: AppleMobileFileIntegrity. Root cause: inadequate enforcement of a...

CVE-2015-7001

AppSandbox in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 mishandles hard links, which allows attackers to bypass Contacts access revocation via a crafted app...

CVE-2015-7083

Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 are affected by CVE-2015-7083, allowing local privilege escalation or memory corruption. Connected sources confirm affected platforms/versions; no root-cause or exact vectors are provided in the documents. Mitigati...

CVE-2015-7043

Technical details for CVE-2015-7043 are not publicly available in the provided documents; monitor for updates.

CVE-2015-7066

OpenGL in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2015-7064...

CVE-2015-7065

OpenGL in Apple iOS before 9.2, OS X before 10.11.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site...

CVE-2015-7060

The ASN.1 decoder in Apple OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted certificate, a different vulnerability than CVE-2015-7059 and CVE-2015-7061...

CVE-2015-7038

Buffer overflow in libc in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code via a crafted package, a different vulnerability than CVE-2015-7039...

CVE-2015-7048

WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than CVE-2015-7095, CVE-2015-7096, CVE-2015-7097,...

CVE-2015-7058

Apple iOS before 9.2, OS X before 10.11.2, and tvOS before 9.1 improperly validate keychain item ACLs, which allows attackers to obtain access to keychain items via a crafted app...

CVE-2015-7103

WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than CVE-2015-7048, CVE-2015-7095, CVE-2015-7096,...

CVE-2015-7104

WebKit in Apple Safari before 9.0.2 and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site...

CVE-2015-7111

The IOHIDFamily API in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app, a different vulnerability than CVE-2015-7112...