CVE-2015-5921

CVE-2015-5921 affects WebKit in Apple iOS versions before 9, where the Content-Disposition: attachment HTTP header is mishandled. This could allow a man-in-the-middle to disclose sensitive information via unspecified vectors. The public documentation identifies the issue as a WebKit information‑d...

CVE-2015-5796

CVE-2015-5796 concerns WebKit as used in Apple iOS before 9 and iTunes before 12.3. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, distinct from other WebKit CVEs cited by Apple. Th...

CVE-2015-5807

WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...

CVE-2015-5793

CVE-2015-5793 affects WebKit/JavaScriptCore used in Apple iOS before 9 and iTunes before 12.3. It allows remote attackers to execute arbitrary code or cause memory corruption and app crashes via a crafted web site. The provided documents do not specify the exact patch version or remediation detai...

CVE-2015-5826

CVE-2015-5826 affects WebKit on iOS prior to 9. The issue arises when cross-origin stylesheets are loaded with non-CSS MIME types, enabling cross-origin data exfiltration and bypass of same-origin policies. Public docs confirm the CVE is tied to Safari/WebKit and was addressed in iOS 9/Safari 9 u...

CVE-2015-5792

WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...

CVE-2015-5810

WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...

CVE-2015-5816

WebKit, as used in JavaScriptCore in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in...

CVE-2015-5793

WebKit, as used in JavaScriptCore in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in...

CVE-2015-5795

WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...

CVE-2015-5823

WebKit, as used in JavaScriptCore in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in...

CVE-2015-5907

WebKit in Apple iOS before 9 allows man-in-the-middle attackers to conduct redirection attacks by leveraging the mishandling of the resource cache of an SSL web site with an invalid X.509 certificate...

CVE-2015-5823

CVE-2015-5823 affects WebKit/JavaScriptCore as used in Apple iOS prior to 9 and iTunes prior to 12.3. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. The provided connected documents...

CVE-2015-5815

CVE-2015-5815 affects WebKit as used in Apple iTunes prior to version 12.3. The vulnerability arises in iTunes Store browsing vectors, allowing a man-in-the-middle attacker to cause memory corruption, leading to arbitrary code execution or a denial of service (application crash). The description ...

CVE-2015-5791

CVE-2015-5791 affects WebKit/JavaScriptCore in Apple iOS before 9 and iTunes before 12.3. A crafted webpage could remotely execute arbitrary code or cause a memory corruption and crash. The connected documents do not specify patch versions or available mitigations; exploitation details are not pr...

CVE-2015-5800

CVE-2015-5800 affects WebKit used in Apple iOS before 9 and iTunes before 12.3, enabling remote code execution or memory corruption via a crafted web site. Connected sources (e.g., OpenVAS and Mageia/MGI advisories) indicate WebKit/WebKit2 updates were released to fix related vulnerabilities, inc...

CVE-2015-5814

WebKit, as used in JavaScriptCore in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in...

CVE-2015-5798

WebKit, as used in Apple iTunes before 12.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in...

CVE-2015-5820

CVE-2015-5820 affects WebKit in Apple iOS prior to iOS 9. A crafted tel://, facetime://, or facetime-audio:// URL can trigger a dialing action, enabling remote dialing via web content. The documentation specifies the vulnerability arises from WebKit/URL handling; exploits or in‑the‑wild details a...

CVE-2015-5807

CVE-2015-5807 affects WebKit as used in Apple iOS prior to iOS 9 and iTunes prior to 12.3. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. The description notes this is a different v...