CVE-2015-3801

The document.cookie API implementation in the CFNetwork Cookies subsystem in WebKit in Apple iOS before 9 allows remote attackers to bypass an intended single-cookie restriction via unspecified vectors...

CVE-2015-5906

The CVE-2015-5906 issue affects WebKit in Apple iOS up to version 9, where the password input context handling allowed QuickType to infer the last character of a password. This is a WebKit input-context vulnerability that could aid password disclosure. The concrete detail is that the vulnerabilit...

CVE-2015-3801

CVE-2015-3801 affects Apple iOS WebKit’s CFNetwork Cookies: the document.cookie API could be used to bypass a single-cookie restriction in WebKit’s cookie handling, prior to iOS 9. The issue originates in CFNetwork Cookies (WebKit) and is exploitable via unspecified vectors over the network. The ...

CVE-2015-5809

CVE-2015-5809 affects WebKit as used in Apple iOS before 9 and iTunes before 12.3, allowing remote code execution or memory-corruption–driven denial of service via a crafted site. Public details in linked advisories confirm WebKit-related fixes in Linux distro packages (e.g., openSUSE webkitgtk u...

CVE-2015-5790

WebKit vulnerability CVE-2015-5790 affects Apple iOS prior to iOS 9 and iTunes prior to 12.3. A crafted web site can trigger remote code execution or cause a denial of service via memory corruption, leading to an application crash. The issue is within the WebKit component used by these products; ...

CVE-2015-5822

Public technical details (affected product, vulnerable component, root cause, impact, fixes) are not provided in the connected documents; monitor for updates from vendor advisories.

CVE-2015-5819

CVE-2015-5819 affects WebKit as used in Apple iOS before version 9 and iTunes before 12.3. The vulnerability enables remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. Connected advisories indicate that patched...

CVE-2015-5788

The CVE-2015-5788 entry describes a flaw in WebKit Canvas handling on iOS prior to version 9 that allows remote attackers to bypass the same-origin policy and read sensitive image data via CANVAS-related vectors. The vulnerability affects the WebKit Canvas implementation and arises from insuffici...

CVE-2015-5792

CVE-2015-5792 affects WebKit as used in Apple iOS prior to 9 and iTunes prior to 12.3. The vulnerability arises from WebKit’s handling of crafted web content, enabling remote attackers to execute arbitrary code or cause memory corruption and application crashes. Affected component: WebKit (Apple ...

CVE-2015-5907

CVE-2015-5907 affects WebKit in Apple iOS prior to 9.0. The root cause described is the mishandling of the resource cache for SSL web sites with invalid X.509 certificates, enabling MITM-style redirection attacks. Public narrative across connected documents confirms the same description (iOS

CVE-2015-5795

CVE-2015-5795 affects WebKit as used in Apple iOS before 9 and iTunes before 12.3. A crafted web site can cause remote code execution or a denial of service via memory corruption and application crash. The description notes this is a different vulnerability than other WebKit CVEs listed in Apple ...

CVE-2015-5802

CVE-2015-5802 affects WebKit as used in Apple iOS before 9 and iTunes before 12.3. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site due to memory corruption. No explicit fixes or patched versions are provided in the connected ...

CVE-2015-5803

CVE-2015-5803 concerns WebKit used in Apple iOS before 9 and iTunes before 12.3. A crafted web site could allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash). The underlying issue is within WebKit; the description notes this is a...

CVE-2015-5789

CVE-2015-5789 affects WebKit used in Apple iOS before 9 and iTunes before 12.3. A crafted web site can remotely execute arbitrary code or cause a denial of service due to memory corruption leading to an application crash. The vulnerability is tied to WebKit’s handling of content (no specific comp...

CVE-2015-5816

The CVE-2015-5816 entry concerns WebKit/JavaScriptCore as used in Apple iOS prior to 9 and iTunes prior to 12.3. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted website. The description does n...

CVE-2015-5817

CVE-2015-5817 affects WebKit used in Apple iOS before 9 and iTunes before 12.3. The vulnerability enables a remote attacker to execute arbitrary code or cause a memory corruption/DoS crash via a crafted web site. Public references in OpenVAS/Mageia advisories confirm WebKit/WebKitGTK components a...

CVE-2015-5819

WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...

CVE-2015-5796

CVE-2015-5796 concerns WebKit as used in Apple iOS before 9 and iTunes before 12.3. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, distinct from other WebKit CVEs cited by Apple. Th...

CVE-2015-5826

CVE-2015-5826 affects WebKit on iOS prior to 9. The issue arises when cross-origin stylesheets are loaded with non-CSS MIME types, enabling cross-origin data exfiltration and bypass of same-origin policies. Public docs confirm the CVE is tied to Safari/WebKit and was addressed in iOS 9/Safari 9 u...

CVE-2015-5805

CVE-2015-5805 affects WebKit used in Apple iOS prior to 9 and iTunes prior to 12.3. The description states a remote attacker can host a crafted web site to achieve arbitrary code execution or cause a denial of service via memory corruption and app crash. The provided documents do not specify affe...