Memory corruption

WebKit, as used in Apple iOS before 8.3, Apple TV before 7.2, and Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different...

Design/Logic Flaw

The private-browsing implementation in WebKit in Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5 places browsing history into an index, which might allow local users to obtain sensitive information by reading index entries...

CVE-2015-1125

The touch-events implementation in WebKit in Apple iOS before 8.3 allows remote attackers to trigger an association between a tap and an unintended web resource via a crafted web site...

UBUNTU-CVE-2015-1126

WebKit, as used in Apple iOS before 8.3 and Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5, does not properly handle the userinfo field in FTP URLs, which allows remote attackers to trigger incorrect resource access via unspecified vectors...

CVE-2015-1119

WebKit, as used in Apple iOS before 8.3, Apple TV before 7.2, and Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different...

CVE-2015-1122

WebKit, as used in Apple iOS before 8.3, Apple TV before 7.2, and Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different...

CVE-2015-1124

WebKit, as used in Apple iOS before 8.3, Apple TV before 7.2, and Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different...

CVE-2015-1126

CVE-2015-1126 affects WebKit components used in Apple iOS prior to 8.3 and Apple Safari prior to 6.2.5, 7.x prior to 7.1.5, and 8.x prior to 8.0.5. The vulnerability arises from improper handling of the userinfo field in FTP URLs, enabling remote attackers to trigger incorrect resource access via...

CVE-2015-1127

CVE-2015-1127 affects WebKit’s private-browsing implementation. It places browsing history into an index, potentially allowing local users to read index entries and obtain sensitive information. Public fixes are present in vendor advisories: Safari updated to 6.2.5, 7.1.5, and 8.0.5; Linux distri...

CVE-2015-1126

WebKit, as used in Apple iOS before 8.3 and Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5, does not properly handle the userinfo field in FTP URLs, which allows remote attackers to trigger incorrect resource access via unspecified vectors...

CVE-2015-1123

WebKit, as used in Apple iOS before 8.3 and Apple TV before 7.2, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-04-08-3 and...

CVE-2015-1122

CVE-2015-1122 is a WebKit/Apple WebKitGTK family vulnerability affecting WebKit components used in Apple iOS, tvOS, Safari and the WebKitGTK stack on Linux distributions. The related connected advisories and Nessus/OpenVAS entries show that CVE-2015-1122 was addressed in several vendor updates (e...

CVE-2015-1125

The CVE-2015-1125 issue is in WebKit’s touch-events handling on Apple iOS prior to 8.3. A crafted website could cause a tap to be associated with an unintended web resource, enabling potential user interaction with a resource different from the tapped one. Affected software is WebKit-based render...

CVE-2015-1119

Summary: CVE-2015-1119 affects WebKit as used in Apple iOS pre-8.3, Apple TV pre-7.2, and Apple Safari pre-6.2.5, 7.x pre-7.1.5, and 8.x pre-8.0.5. It allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website, as described in multiple sources. Root cause...

CVE-2015-1123

CVE-2015-1123 affects WebKit as used in Apple iOS before 8.3 and Apple TV before 7.2. The description states that a crafted website can cause remote code execution or a denial of service (memory corruption and application crash). The root cause is memory corruption in WebKit leading to either arb...

CVE-2015-1125

The touch-events implementation in WebKit in Apple iOS before 8.3 allows remote attackers to trigger an association between a tap and an unintended web resource via a crafted web site...

CVE-2015-1120

WebKit, as used in Apple iOS before 8.3, Apple TV before 7.2, and Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different...

CVE-2015-1121

WebKit, as used in Apple iOS before 8.3, Apple TV before 7.2, and Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different...

CVE-2015-1120

CVE-2015-1120 affects WebKit as used in multiple Apple platforms (iOS, Apple TV, Safari) with the vulnerability described as allowing remote execution of arbitrary code or a denial of service through a crafted web site. The initial description notes this is a distinct vulnerability from other Web...

CVE-2015-1121

CVE-2015-1121 affects WebKit as used in Apple iOS before 8.3, Apple TV before 7.2, and Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5. The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website, through memory corruption and a...