Improper access control

AppleMobileFileIntegrity in Apple iOS before 9.2 and tvOS before 9.1 does not prevent changes to access-control structures, which allows attackers to execute arbitrary code in a privileged context via a crafted app...

CVE-2015-7102

WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than CVE-2015-7048, CVE-2015-7095, CVE-2015-7096,...

CVE-2015-7101

WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than CVE-2015-7048, CVE-2015-7095, CVE-2015-7096,...

CVE-2015-7098

WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than CVE-2015-7048, CVE-2015-7095, CVE-2015-7096,...

CVE-2015-7047

CVE-2015-7047 is a local privilege-escalation vulnerability affecting Apple platforms: iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1. The issue arises from a crafted mach message that is misparsed by the kernel, enabling a local user to gain privileges. Public explo...

CVE-2015-7054

CVE-2015-7054 affects Apple platforms via the zlib component in the Compression subsystem (iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, watchOS before 2.1). The vulnerability arises because memory is not initialized for an unspecified data structure, allowing remote attackers to execute ...

CVE-2015-7066

CVE-2015-7066 affects OpenGL in Apple software: iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1. A crafted web site can trigger memory corruption, enabling remote code execution or a denial of service. Root cause is memory corruption in OpenGL as described; the initia...

CVE-2015-7110

The CVE-2015-7110 entry concerns Apple OS X Disk Images handling prior to 10.11.2 and tvOS prior to 9.1. A crafted disk image can trigger memory corruption in the Disk Images component, allowing local users to gain privileges or cause a denial of service. Affected software/versions are explicitly...

CVE-2015-7100

WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than CVE-2015-7048, CVE-2015-7095, CVE-2015-7096,...

CVE-2015-7051

MobileStorageMounter in Apple iOS before 9.2 and tvOS before 9.1 mishandles the timing of trust-cache loading, which allows attackers to execute arbitrary code in a privileged context via a crafted app...

CVE-2015-7110

The Disk Images component in Apple OS X before 10.11.2 and tvOS before 9.1 allows local users to gain privileges or cause a denial of service memory corruption via a crafted disk image...

CVE-2015-7105

CoreGraphics in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font file...

CVE-2015-7112

Based on connected sources, CVE-2015-7112 maps to a memory-corruption vulnerability in Apple's IOHIDFamily (IOHIDEvent handling) that enables arbitrary code execution in a privileged context. Public references identify IOHIDFamily as affected on Apple platforms (macOS OS X, iOS, tvOS, watchOS) wi...

CVE-2015-7040

CVE-2015-7040 affects the kernel in Apple iOS (<9.2), OS X (<10.11.2), tvOS (<9.1), and watchOS (

CVE-2015-7084

CVE-2015-7084 affects Apple iOS <9.2, OS X <10.11.2, tvOS <9.1, and watchOS

CVE-2015-7102

Technical details about CVE-2015-7102 are not provided in the connected documents; no affected products, versions, or fixes are specified. Monitor for updates from official sources.

CVE-2015-7041

The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to cause a denial of service via a crafted app, a different vulnerability than CVE-2015-7040, CVE-2015-7042, and CVE-2015-7043...

CVE-2015-7096

WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than CVE-2015-7048, CVE-2015-7095, CVE-2015-7097,...

CVE-2015-7048

Technical details for CVE-2015-7048 are not publicly available in the provided documents. Monitor for updates from official advisories and the connected EUVD entries.

CVE-2015-7111

CVE-2015-7111 involves Apple’s IOHIDFamily: memory corruption in IOHIDEvent handling could allow code execution in a privileged context (or DoS). The connected exploit information points to IOHIDEventQueue::start flow where improper queue sizing and memory management (e.g., premature freeing of d...