Vulnerabilities > Apple > Watchos > 1.0

DATE CVE VULNERABILITY TITLE RISK
2015-10-09 CVE-2015-5922 Memory Corruption vulnerability in ICU
Unspecified vulnerability in International Components for Unicode (ICU) before 53.1.0, as used in Apple OS X before 10.11 and watchOS before 2, has unknown impact and attack vectors.
network
low complexity
apple icu-project
critical
10.0
2015-09-18 CVE-2015-5916 Information Exposure vulnerability in Apple Iphone OS and Watchos
The Apple Pay component in Apple iOS before 9 allows remote terminals to obtain sensitive recent-transaction information during payments by leveraging the transaction-log feature.
network
apple CWE-200
4.3
2015-09-18 CVE-2015-5903 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Apple Iphone OS, mac OS X and Watchos
The kernel in Apple iOS before 9 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5868 and CVE-2015-5896.
network
low complexity
apple CWE-119
critical
10.0
2015-09-18 CVE-2015-5899 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Apple Iphone OS, mac OS X and Watchos
libpthread in the kernel in Apple iOS before 9 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.
local
low complexity
apple CWE-119
7.2
2015-09-18 CVE-2015-5898 Information Exposure vulnerability in Apple Iphone OS and Watchos
CFNetwork in Apple iOS before 9 relies on the hardware UID for its cache encryption key, which makes it easier for physically proximate attackers to obtain sensitive information by obtaining this UID.
local
low complexity
apple CWE-200
2.1
2015-09-18 CVE-2015-5896 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Apple Iphone OS, mac OS X and Watchos
The kernel in Apple iOS before 9 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5868 and CVE-2015-5903.
local
low complexity
apple CWE-119
7.2
2015-09-18 CVE-2015-5885 Information Exposure vulnerability in Apple Iphone OS, mac OS X and Watchos
The CFNetwork Cookies component in Apple iOS before 9 allows remote attackers to track users via vectors involving a cookie for a top-level domain.
network
low complexity
apple CWE-200
5.0
2015-09-18 CVE-2015-5882 Improper Access Control vulnerability in Apple Iphone OS, mac OS X and Watchos
The processor_set_tasks API implementation in Apple iOS before 9 allows local users to bypass an entitlement protection mechanism and obtain access to the task ports of arbitrary processes by leveraging root privileges.
local
low complexity
apple CWE-284
7.2
2015-09-18 CVE-2015-5876 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Apple Iphone OS, mac OS X and Watchos
dyld in Dev Tools in Apple iOS before 9 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
network
apple CWE-119
critical
9.3
2015-09-18 CVE-2015-5874 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Apple products
CoreText in Apple iOS before 9 and iTunes before 12.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file.
network
low complexity
apple CWE-119
7.5