CVE-2015-5927

CVE-2015-5927 is a FontParser memory corruption vulnerability in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1. The issue arises from processing crafted font files and can lead to remote code execution or memory corruption resulting in a denial of service. Connected document...

CVE-2015-6996

CVE-2015-6996 affects IOAcceleratorFamily in Apple iOS < 9.1, OS X < 10.11.1, and watchOS

CVE-2015-5925

CVE-2015-5925 affects Apple CoreGraphics; memory corruption in CoreGraphics can be triggered by visiting a crafted web page. It impacts iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1, with remote code execution or memory corruption as described. Apple’s advisories list this as part...

CVE-2015-7006

Directory traversal vulnerability in the BOM aka Bill of Materials component in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code via a crafted CPIO archive...

CVE-2015-7015

Heap-based buffer overflow in the DNS client library in configd in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows attackers to execute arbitrary code via a crafted app that sends a spoofed configd response to a client...

CVE-2015-5936

ImageIO in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via crafted metadata in an image, a different vulnerability than CVE-2015-5935, CVE-2015-5937, and CVE-2015-5939...

CVE-2015-5935

CVE-2015-5935 affects ImageIO in Apple iOS ≤9.0 (fixed in 9.1), OS X ≤10.11 (fixed in 10.11.1), and watchOS ≤2.0.0 (fixed in 2.0.1). The root cause is memory corruption caused by crafted image metadata, enabling remote code execution or a denial of service. Remediation involves upgrading to the f...

CVE-2015-7015

CVE-2015-7015 is a heap-based buffer overflow in the DNS client library of configd that affects Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1. An attacker could exploit a crafted configd response to execute arbitrary code on a vulnerable device. Public-connected documents co...

CVE-2015-6996

IOAcceleratorFamily in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted app...

CVE-2015-5927

FontParser in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font file, a different vulnerability than CVE-2015-5942...

CVE-2015-5926

CVE-2015-5926 affects Apple’s CoreGraphics in iOS <9.1, OS X <10.11.1, and watchOS

CVE-2015-6974

CVE-2015-6974 affects IOHIDFamily in Apple iOS (pre-9.1), OS X (pre-10.11.1), and watchOS (pre-2.0.1). Root cause is a memory corruption vulnerability in IOHIDFamily that can be triggered by a crafted app, allowing arbitrary code execution in a privileged context or contributing to a denial of se...

CVE-2015-5942

CVE-2015-5942 affects Apple consumer platforms via the FontParser component. The vulnerability exists in iOS versions prior to 9.1, OS X prior to 10.11.1, and watchOS prior to 2.0.1, where processing a crafted font file can lead to remote code execution or a denial of service due to memory corrup...

CVE-2015-5937

ImageIO in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via crafted metadata in an image, a different vulnerability than CVE-2015-5935, CVE-2015-5936, and CVE-2015-5939...

CVE-2015-6989

Grand Central Dispatch vulnerability CVE-2015-6989 affects Apple iOS prior to 9.1, OS X prior to 10.11.1, and watchOS prior to 2.0.1. The root cause is a memory corruption issue in the handling of dispatch calls, which can lead to arbitrary code execution or memory corruption when processing a cr...

CVE-2015-5939

CVE-2015-5939 affects Apple ImageIO in iOS (pre-9.1), OS X (pre-10.11.1), and watchOS (pre-2.0.1). The vulnerability allows remote attackers to trigger arbitrary code execution or a denial of service via crafted metadata embedded in an image, resulting in memory corruption. The accompanying conne...

Apple update the 4 9 patch, Pangu jailbreak uses exploits are fixed-vulnerability warning-the black bar safety net

! 3 weeks ago, Apple fixes the core product of the vulnerability, and released the latest version of OS X, EI Captan system. However on Tuesday and ushered in another wave patch, repair a large number of OS X, iOS, Safari, iTunes, watchOS（smart watchoperating system of the vulnerability. Pangu...

Apple Patches Vulnerabilities in OS X, iOS, Including Pangu Jailbreak

It was only three weeks ago that Apple patched its core line of products and pushed its latest version of OS X, El Capitan. Yet another wave of patches arrived Thursday however to address scores of vulnerabilities in OS X, iOS, Safari, iTunes, and even the company’s smart watch operating system,...

Apple Releases Multiple Security Updates

Apple has released several security updates to address critical vulnerabilities in multiple Apple products. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system. Available updates include: OS X Server 5.0.15 for OS X Yosemite v10.10.5 and...

Apple watchOS denial of service vulnerability (CNVD-2015-06753)

Apple watchOS is a smartwatch operating system developed by Apple. A denial of service vulnerability exists in Apple watchOS that allows local users to gain privileges or cause a denial of service via unspecified vectors...