
CVE-2015-5855 – Apple Security Advisory 2015-09-16-1
https://notcve.org/view.php?id=CVE-2015-5855
18 Sep 2015 — Apple iOS before 9 allows attackers to discover the e-mail address of a player via a crafted Game Center app. Vulnerabilidad en Apple iOS en versiones anteriores a 9, permite a atacantes descubrir las direcciones de e-mail de un jugador a través de una aplicación del Game Center manipulada. OS X El Capitan 10.11 is now available and addresses close to 100 vulnerabilities that may exist in prior releases. • http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.html • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVE-2015-5837 – Apple Security Advisory 2015-09-16-1
https://notcve.org/view.php?id=CVE-2015-5837
18 Sep 2015 — PluginKit in Apple iOS before 9 allows attackers to bypass an intended app-trust requirement and install arbitrary extensions via a crafted enterprise app. Vulnerabilidad en PluginKit en Apple iOS en versiones anteriores a 9, permite a atacantes eludir un requisito destinado a app-trust e instalar extensiones arbitrarias a través de una aplicación empresarial manipulada. iOS 9 is now available and addresses denial of service, information disclosure, and various other issues. • http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.html • CWE-20: Improper Input Validation •

CVE-2015-5846 – Apple Security Advisory 2015-09-16-1
https://notcve.org/view.php?id=CVE-2015-5846
18 Sep 2015 — IOKit in the kernel in Apple iOS before 9 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2015-5844 and CVE-2015-5845. Vulnerabilidad en IOKit en el kernel en Apple iOS en versiones anteriores a 9, permite a atacantes ejecutar código arbitrario en un contexto privilegiado o causar una denegación de servicio (corrupción de memoria) a través de una aplicación manipulada, una vulnerabilidad... • http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVE-2015-5842 – Apple Security Advisory 2015-09-16-1
https://notcve.org/view.php?id=CVE-2015-5842
18 Sep 2015 — XNU in the kernel in Apple iOS before 9 does not properly initialize an unspecified data structure, which allows local users to obtain sensitive memory-layout information via unknown vectors. Vulnerabilidad en XNU en el kernel en Apple iOS en versiones anteriores a 9, no inicializa adecuadamente una estructura de datos no especificada, lo que permite a usuarios locales obtener información sensible de la estructura de memoria a través de vectores desconocidos. OS X El Capitan 10.11 is now available and addre... • http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.html • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVE-2015-5840 – Apple Security Advisory 2015-09-16-1
https://notcve.org/view.php?id=CVE-2015-5840
18 Sep 2015 — The checkint division routines in removefile in Apple iOS before 9 allow attackers to cause a denial of service (overflow fault and app crash) via crafted data. Vulnerabilidad en las rutinas de división checkint en removefile en Apple iOS en versiones anteriores a 9, permite a atacantes causar una denegación de servicio (fallo de desbordamiento y caída de la aplicación) a través de datos manipulados. OS X El Capitan 10.11 is now available and addresses close to 100 vulnerabilities that may exist in prior re... • http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVE-2015-5898 – Apple Security Advisory 2015-09-16-1
https://notcve.org/view.php?id=CVE-2015-5898
18 Sep 2015 — CFNetwork in Apple iOS before 9 relies on the hardware UID for its cache encryption key, which makes it easier for physically proximate attackers to obtain sensitive information by obtaining this UID. Vulnerabilidad en CFNetwork en Apple iOS en versiones anteriores a 9, confía en el UID de hardware para su clave de cifrado caché, lo que facilita a atacantes físicamente próximos obtener información sensible mediante la obtención de este UID . iOS 9 is now available and addresses denial of service, informatio... • http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.html • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVE-2015-5903 – Apple Security Advisory 2015-09-16-1
https://notcve.org/view.php?id=CVE-2015-5903
18 Sep 2015 — The kernel in Apple iOS before 9 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5868 and CVE-2015-5896. Vulnerabilidad en el kernel en Apple iOS en versiones anteriores a 9, permite a usuarios locales obtener privilegios o causar una denegación de servicio (corrupción de memoria) a través de vectores no especificados, una vulnerabilidad diferente a CVE-2015-5868 y CVE-2015-5896. OS X El Capitan 10.11 is ... • http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVE-2015-5867 – Apple Security Advisory 2015-09-16-1
https://notcve.org/view.php?id=CVE-2015-5867
18 Sep 2015 — IOHIDFamily in Apple iOS before 9 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. Vulnerabilidad en IOHIDFamily en Apple iOS en versiones anteriores a 9, permite a atacantes ejecutar código arbitrario en un contexto privilegiado o causar una denegación de servicio (corrupción de memoria) a través de una aplicación manipulada. OS X El Capitan 10.11 is now available and addresses close to 100 vulnerabilities that may exist ... • http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVE-2015-5848 – Apple Security Advisory 2015-09-16-1
https://notcve.org/view.php?id=CVE-2015-5848
18 Sep 2015 — IOAcceleratorFamily in Apple iOS before 9 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors. Vulnerabilidad en IOAcceleratorFamily en Apple iOS en versiones anteriores a 9, permite a usuarios locales ganar privilegios o causar una denegación de servicio (corrupción de memoria) a través de vectores no especificados. iOS 9 is now available and addresses denial of service, information disclosure, and various other issues. • http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVE-2015-5876 – Apple Security Advisory 2015-09-16-1
https://notcve.org/view.php?id=CVE-2015-5876
18 Sep 2015 — dyld in Dev Tools in Apple iOS before 9 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. Vulnerabilidad en dyld en Dev Tools en Apple iOS en versiones anteriores a 9, permite a atacantes ejecutar código arbitrario en un contexto privilegiado o causar una denegación de servicio (corrupción de memoria) a través de una aplicación manipulada. OS X El Capitan 10.11 is now available and addresses close to 100 vulnerabilities tha... • http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •