CVE-2015-5803

WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...

CVE-2015-5806

WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...

CVE-2015-5822

Public technical details (affected product, vulnerable component, root cause, impact, fixes) are not provided in the connected documents; monitor for updates from vendor advisories.

CVE-2015-5907

CVE-2015-5907 affects WebKit in Apple iOS prior to 9.0. The root cause described is the mishandling of the resource cache for SSL web sites with invalid X.509 certificates, enabling MITM-style redirection attacks. Public narrative across connected documents confirms the same description (iOS

CVE-2015-3801

CVE-2015-3801 affects Apple iOS WebKit’s CFNetwork Cookies: the document.cookie API could be used to bypass a single-cookie restriction in WebKit’s cookie handling, prior to iOS 9. The issue originates in CFNetwork Cookies (WebKit) and is exploitable via unspecified vectors over the network. The ...

CVE-2015-5799

CVE-2015-5799 affects WebKit as used in Apple iOS before 9 and iTunes before 12.3, enabling remote execution of code or a memory corruption-induced denial of service via a crafted web site. The connected advisories indicate the issue resides in WebKit/WebKit2 and that a fix was released in WebKit...

CVE-2015-5821

CVE-2015-5821 details (concrete in sources): WebKit, as used in Apple iOS prior to 9 and iTunes prior to 12.3, is vulnerable to remote exploitation via a crafted web site. The underlying issue is memory corruption that can lead to arbitrary code execution or memory corruption resulting in an appl...

CVE-2015-5792

CVE-2015-5792 affects WebKit as used in Apple iOS prior to 9 and iTunes prior to 12.3. The vulnerability arises from WebKit’s handling of crafted web content, enabling remote attackers to execute arbitrary code or cause memory corruption and application crashes. Affected component: WebKit (Apple ...

CVE-2015-5788

The CVE-2015-5788 entry describes a flaw in WebKit Canvas handling on iOS prior to version 9 that allows remote attackers to bypass the same-origin policy and read sensitive image data via CANVAS-related vectors. The vulnerability affects the WebKit Canvas implementation and arises from insuffici...

CVE-2015-5795

CVE-2015-5795 affects WebKit as used in Apple iOS before 9 and iTunes before 12.3. A crafted web site can cause remote code execution or a denial of service via memory corruption and application crash. The description notes this is a different vulnerability than other WebKit CVEs listed in Apple ...

CVE-2015-5801

CVE-2015-5801 concerns WebKit as used in Apple iOS before 9 and iTunes before 12.3. A crafted web site could cause remote code execution or a denial of service via memory corruption, leading to an application crash. The vulnerability is triggered through WebKit’s handling of web content, and is d...

CVE-2015-5826

CVE-2015-5826 affects WebKit on iOS prior to 9. The issue arises when cross-origin stylesheets are loaded with non-CSS MIME types, enabling cross-origin data exfiltration and bypass of same-origin policies. Public docs confirm the CVE is tied to Safari/WebKit and was addressed in iOS 9/Safari 9 u...

CVE-2015-5812

CVE-2015-5812 affects WebKit as used in Apple iOS before 9 and iTunes before 12.3. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. The root cause is memory corruption within WebKit l...

CVE-2015-5808

CVE-2015-5808 affects WebKit as used by Apple iTunes before 12.3. Root cause: WebKit vulnerability that can be triggered via iTunes Store browsing, enabling a man-in-the-middle to execute arbitrary code or cause memory corruption and application crash (DoS). Impact is partial confidentiality/inte...

CVE-2015-5818

CVE-2015-5818 affects WebKit used in Apple iOS before 9 and iTunes before 12.3. A crafted website can trigger a vulnerability that may allow remote code execution or cause a denial of service through memory corruption and application crashes. The provided documents do not specify the exact root c...

CVE-2015-5799

WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...

CVE-2015-5797

WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...

CVE-2015-5906

The HTML form implementation in WebKit in Apple iOS before 9 does not prevent QuickType access to the final character of a password, which might make it easier for remote attackers to discover a password by leveraging a later prediction containing that character...

CVE-2015-5788

The WebKit Canvas implementation in Apple iOS before 9 allows remote attackers to bypass the Same Origin Policy and obtain sensitive image information via vectors involving a CANVAS element...

CVE-2015-5796

WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...