CVE-2015-3744

WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVE...

CVE-2015-5759

WebKit in Apple iOS before 8.4.1 allows remote attackers to spoof clicks via a crafted web site that leverages tap events...

CVE-2015-3747

CVE-2015-3747 affects WebKit used in Apple iOS (pre-8.4.1) and Safari (pre-6.2.8, 7.x pre-7.1.8, 8.x pre-8.0.8). A crafted website could trigger remote code execution or memory corruption leading to application crash (denial of service). Root cause is memory corruption in WebKit components expose...

CVE-2015-3745

CVE-2015-3745 involves WebKit used in Apple iOS before 8.4.1 and Safari before 6.2.8, and versions 7.x before 7.1.8, 8.x before 8.0.8. The vulnerability allows a remote attacker to run arbitrary code or cause a denial of service through a crafted web site, via memory corruption and application cr...

CVE-2015-3733

CVE-2015-3733 is a WebKit memory-corruption/remote-code-execution issue present in WebKit as used by Apple iOS prior to 8.4.1 and Safari prior to 6.2.8, 7.x prior to 7.1.8, and 8.x prior to 8.0.8. The root cause is memory corruption triggered by complex crafted web content, which can lead to arbi...

CVE-2015-3752

The Content Security Policy implementation in WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, as used in iOS before 8.4.1 and other products, does not properly restrict cookie transmission for report requests, which allows remote attackers to obtain sensitive...

CVE-2015-3739

WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVE...

CVE-2015-3736

WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVE...

CVE-2015-3738

WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVE...

CVE-2015-3748

CVE-2015-3748 affects WebKit as used in Apple iOS (before 8.4.1) and Safari (before 6.2.8, 7.x before 7.1.8, 8.x before 8.0.8). The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site, via memory corruption in WebKit. The description...

CVE-2015-3740

WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVE...

CVE-2015-5759

CVE-2015-5759 concerns WebKit in Apple iOS prior to 8.4.1, where a crafted web site exploiting tap events can cause spoofed clicks on other pages. The issue is tied to WebKit’s handling of tap events, enabling a remote attacker to mislead user input. Affected product: iOS devices with WebKit (pre...

CVE-2015-3753

WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, as used in iOS before 8.4.1 and other products, does not properly perform taint checking for CANVAS elements, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive image data by leveraging a...

CVE-2015-3742

CVE-2015-3742 affects WebKit as used in Apple iOS (before 8.4.1) and Safari (before 6.2.8; 7.x before 7.1.8; 8.x before 8.0.8). The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site, due to memory corruption that can crash the application....

CVE-2015-3755

CVE-2015-3755 affects WebKit in Apple Safari (and WebKit-based components used in iOS before 8.4.1 and other products): WebKit could be induced to spoof the user interface via a malformed URL, enabling a remote attacker to mislead users. Affected versions include Safari before 6.2.8, 7.x before 7...

CVE-2015-3732

CVE-2015-3732 affects WebKit/WebKit2 used in Apple iOS and Safari; the root cause is memory corruption in WebKit leading to remote code execution or memory corruption crashes when visiting crafted sites. Connected advisories confirm a fix: WebKit2 updated to version 2.10.9 (Mageia/MGASA-2016-0116...

CVE-2015-3754

CVE-2015-3754: WebKit’s private-browsing implementation in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8 does not prevent caching of HTTP authentication credentials. This can allow remote attackers to track users via a crafted website. Affected software is WebKit/WebKitGTK+ im...

CVE-2015-3730

CVE-2015-3730 is a WebKit vulnerability that allowed remote code execution or memory-corruption-induced denial of service via a crafted web site. It affected WebKit-based components in Apple products (iOS and Safari) across multiple versions (as cited in the initial doc). Connected advisories con...

CVE-2015-3734

CVE-2015-3734 concerns WebKit as used in Apple iOS prior to 8.4.1 and Safari prior to 6.2.8, 7.x prior to 7.1.8, and 8.x prior to 8.0.8. A crafted web page can cause remote code execution or a denial of service via memory corruption, potentially crashing the affected application. The initial desc...

CVE-2015-3749

CVE-2015-3749 affects WebKit as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. The ro...