CVE-2015-7112

Based on connected sources, CVE-2015-7112 maps to a memory-corruption vulnerability in Apple's IOHIDFamily (IOHIDEvent handling) that enables arbitrary code execution in a privileged context. Public references identify IOHIDFamily as affected on Apple platforms (macOS OS X, iOS, tvOS, watchOS) wi...

CVE-2015-7083

The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to gain privileges or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2015-7084...

CVE-2015-7060

The ASN.1 decoder in Apple OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted certificate, a different vulnerability than CVE-2015-7059 and CVE-2015-7061...

CVE-2015-7066

OpenGL in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2015-7064...

CVE-2015-7061

CVE-2015-7061 affects Apple OS X prior to 10.11.2, tvOS prior to 9.1, and watchOS prior to 2.1. The issue stems from the ASN.1 decoder handling a crafted certificate, enabling remote code execution or memory corruption. This is a separate vulnerability from CVE-2015-7059 and CVE-2015-7060. Impact...

CVE-2015-7113

The LaunchServices component in Apple iOS before 9.2 and watchOS before 2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a malformed plist...

CVE-2015-7001

AppSandbox in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 mishandles hard links, which allows attackers to bypass Contacts access revocation via a crafted app...

CVE-2015-7046

The CVE-2015-7046 issue affects Apple’s OS X/iOS/tvOS/watchOS: the Sandbox in xnu does not properly enforce privilege separation, allowing a crafted app with root privileges to bypass ASLR. Affected: iOS prior to 9.2, OS X prior to 10.11.2, tvOS prior to 9.1, watchOS prior to 2.1. Impact stated i...

CVE-2015-7001

CVE-2015-7001 affects Apple platforms: iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1. The underlying issue is AppSandbox mishandling hard links, which allows a crafted app to bypass Contacts access revocation. This is the explicit vulnerability described in CVE sour...

CVE-2015-7043

The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to cause a denial of service via a crafted app, a different vulnerability than CVE-2015-7040, CVE-2015-7041, and CVE-2015-7042...

CVE-2015-7038

Buffer overflow in libc in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code via a crafted package, a different vulnerability than CVE-2015-7039...

CVE-2015-7053

ImageIO in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted image...

CVE-2015-7043

Technical details for CVE-2015-7043 are not publicly available in the provided documents; monitor for updates.

CVE-2015-7053

This CVE (CVE-2015-7053) concerns ImageIO in Apple platforms: iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1. The root cause is memory corruption in ImageIO triggered by a crafted image, allowing remote attackers to execute arbitrary code or cause a denial of service...

CVE-2015-7041

Technical details about CVE-2015-7041 are not publicly provided in the connected documents. The initial entry notes a denial-of-service risk in Apple OS/iOS/watchOS/tvOS prior to certain versions, but no concrete vendor/product/version specifics or fixes are included here; monitor for updates.

CVE-2015-7111

The IOHIDFamily API in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app, a different vulnerability than CVE-2015-7112...

CVE-2015-7083

Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 are affected by CVE-2015-7083, allowing local privilege escalation or memory corruption. Connected sources confirm affected platforms/versions; no root-cause or exact vectors are provided in the documents. Mitigati...

CVE-2015-7059

Apple OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 are affected by CVE-2015-7059 via a flaw in the ASN.1 decoder that allows remote attackers to trigger memory corruption or arbitrary code execution through a crafted certificate. The report aggregates multiple CVEs in Apple’s 2015...

CVE-2015-7038

Based on connected documents, CVE-2015-7038 is a buffer overflow in Apple’s libc affecting iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1. The underlying issue is a libc buffer overflow that allows remote code execution via a crafted package. No specific patch/versio...

CVE-2015-7084

The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to gain privileges or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2015-7083...