VYPR

iOS

by Apple Inc.

CVEs (2,979)

  • CVE-2015-3721Jul 3, 2015
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.01

    The kernel in Apple iOS before 8.4 and OS X before 10.10.4 does not properly handle HFS parameters, which allows attackers to obtain sensitive memory-layout information via a crafted app.

  • CVE-2015-3719Jul 3, 2015
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.01

    TrueTypeScaler in FontParser in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-3694.

  • CVE-2015-3717Jul 3, 2015
    SQLite
    SQLite
    risk 0.00cvss —epss 0.02

    Multiple buffer overflows in the printf functionality in SQLite, as used in Apple iOS before 8.4 and OS X before 10.10.4, allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors.

  • CVE-2015-3710Jul 3, 2015
    Apple Inc.
    Mail
    risk 0.00cvss —epss 0.01

    Mail in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to trigger a refresh operation, and consequently cause a visit to an arbitrary web site, via a crafted HTML e-mail message.

  • CVE-2015-3703Jul 3, 2015
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.02

    ImageIO in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted TIFF image.

  • CVE-2015-3694Jul 3, 2015
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.01

    FontParser in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-3719.

  • CVE-2015-3690Jul 3, 2015
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.01

    The DiskImages subsystem in Apple iOS before 8.4 and OS X before 10.10.4 allows attackers to obtain sensitive memory-layout information for the kernel via a crafted app.

  • CVE-2015-3689Jul 3, 2015
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.02

    CoreText in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted text file, a different vulnerability than CVE-2015-3685, CVE-2015-3686, CVE-2015-3687, and CVE-2015-3688.

  • CVE-2015-3688Jul 3, 2015
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.03

    CoreText in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted text file, a different vulnerability than CVE-2015-3685, CVE-2015-3686, CVE-2015-3687, and CVE-2015-3689.

  • CVE-2015-3687Jul 3, 2015
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.03

    CoreText in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted text file, a different vulnerability than CVE-2015-3685, CVE-2015-3686, CVE-2015-3688, and CVE-2015-3689.

  • CVE-2015-3686Jul 3, 2015
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.03

    CoreText in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted text file, a different vulnerability than CVE-2015-3685, CVE-2015-3687, CVE-2015-3688, and CVE-2015-3689.

  • CVE-2015-3685Jul 3, 2015
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.02

    CoreText in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted text file, a different vulnerability than CVE-2015-3686, CVE-2015-3687, CVE-2015-3688, and CVE-2015-3689.

  • CVE-2015-3684Jul 3, 2015
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.02

    The HTTPAuthentication implementation in CFNetwork in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted credentials in a URL.

  • CVE-2015-3659Jul 3, 2015
    Apple Inc.
    Safari
    risk 0.00cvss —epss 0.01

    The SQLite authorizer in the Storage functionality in WebKit in Apple Safari before 6.2.7, 7.x before 7.1.7, and 8.x before 8.0.7, as used in Apple iOS before 8.4 and other products, does not properly restrict access to SQL functions, which allows remote attackers to execute…

  • CVE-2015-3658Jul 3, 2015
    Apple Inc.
    Safari
    risk 0.00cvss —epss 0.00

    The Page Loading functionality in WebKit in Apple Safari before 6.2.7, 7.x before 7.1.7, and 8.x before 8.0.7, as used in Apple iOS before 8.4 and other products, does not properly consider redirects during decisions about sending an Origin header, which makes it easier for…

  • CVE-2015-1125Apr 10, 2015
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.00

    The touch-events implementation in WebKit in Apple iOS before 8.3 allows remote attackers to trigger an association between a tap and an unintended web resource via a crafted web site.

  • CVE-2015-1124Apr 10, 2015
    Apple Inc.
    Safari
    risk 0.00cvss —epss 0.01

    WebKit, as used in Apple iOS before 8.3, Apple TV before 7.2, and Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a…

  • CVE-2015-1123Apr 10, 2015
    Apple Inc.
    Webkit
    risk 0.00cvss —epss 0.02

    WebKit, as used in Apple iOS before 8.3 and Apple TV before 7.2, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in…

  • CVE-2015-1122Apr 10, 2015
    Apple Inc.
    Safari
    risk 0.00cvss —epss 0.01

    WebKit, as used in Apple iOS before 8.3, Apple TV before 7.2, and Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a…

  • CVE-2015-1120Apr 10, 2015
    Apple Inc.
    Safari
    risk 0.00cvss —epss 0.01

    WebKit, as used in Apple iOS before 8.3, Apple TV before 7.2, and Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a…

Page 131 of 149