Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-1102 State: PUBLISHED Published: 2015-04-10T14:00:00 Last Updated: 2024-08-06T04:33:20.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 does not properly handle TCP headers, which allows man-in-the-middle attackers to cause a denial of service via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT204659 - https://support.apple.com/kb/HT204870 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html - http://www.securitytracker.com/id/1032048 - http://lists.apple.com/archives/security-announce/2
2015/Apr/msg00002.html - http://www.securitytracker.com/id/1032048 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html - https://support.apple.com/HT204662 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00003.html - https://support.apple.com/HT204661
CVE ID: CVE-2015-1103 State: PUBLISHED Published: 2015-04-10T14:00:00 Last Updated: 2024-08-06T04:33:20.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 makes routing changes in response to ICMP_REDIRECT messages, which allows remote attackers to cause a denial of service (network outage) or obtain sensitive packet-content information via a crafted ICMP packet. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT204659 - https://support.apple.com/kb/HT204870 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html - http://www.securi
ort.apple.com/kb/HT204870 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html - http://www.securitytracker.com/id/1032048 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html - https://support.apple.com/HT204662 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00003.html - https://support.apple.com/HT204661
CVE ID: CVE-2015-1104 State: PUBLISHED Published: 2015-04-10T14:00:00 Last Updated: 2024-08-06T04:33:20.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 does not properly determine whether an IPv6 packet had a local origin, which allows remote attackers to bypass an intended network-filtering protection mechanism via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT204659 - https://support.apple.com/kb/HT204870 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html - http://www.securitytracker.com/id/1032048 -
http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html - http://www.securitytracker.com/id/1032048 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html - https://support.apple.com/HT204662 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00003.html - https://support.apple.com/HT204661
CVE ID: CVE-2015-1105 State: PUBLISHED Published: 2015-04-10T14:00:00 Last Updated: 2024-08-06T04:33:20.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TCP implementation in the kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 does not properly implement the Urgent (aka out-of-band data) mechanism, which allows remote attackers to cause a denial of service via crafted packets. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT204659 - https://support.apple.com/kb/HT204870 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html - http://www.securitytracker.com/id/1032048 - http:
://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html - http://www.securitytracker.com/id/1032048 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html - https://support.apple.com/HT204662 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00003.html - https://support.apple.com/HT204661
CVE ID: CVE-2015-1106 State: PUBLISHED Published: 2015-04-10T14:00:00 Last Updated: 2024-08-06T04:33:20.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: The QuickType feature in the Keyboards subsystem in Apple iOS before 8.3 allows physically proximate attackers to discover passcodes by reading the lock screen during use of a Bluetooth keyboard. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html - http://www.securitytracker.com/id/1032050 - http://www.securityfocus.com/bid/73978 - https://support.apple.com/HT204661
CVE ID: CVE-2015-1107 State: PUBLISHED Published: 2015-04-10T14:00:00 Last Updated: 2024-08-06T04:33:20.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Lock Screen component in Apple iOS before 8.3 does not properly implement the erasure feature for incorrect passcode-authentication attempts, which makes it easier for physically proximate attackers to obtain access by making many passcode guesses. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html - http://www.securitytracker.com/id/1032050 - http://www.securityfocus.com/bid/73978 - https://support.apple.com/HT204661
CVE ID: CVE-2015-1108 State: PUBLISHED Published: 2015-04-10T14:00:00 Last Updated: 2024-08-06T04:33:20.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Lock Screen component in Apple iOS before 8.3 does not properly enforce the limit on incorrect passcode-authentication attempts, which makes it easier for physically proximate attackers to obtain access by making many passcode guesses. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html - http://www.securitytracker.com/id/1032050 - http://www.securityfocus.com/bid/73978 - https://support.apple.com/HT204661
CVE ID: CVE-2015-1109 State: PUBLISHED Published: 2015-04-10T14:00:00 Last Updated: 2024-08-06T04:33:20.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: NetworkExtension in Apple iOS before 8.3 stores credentials in VPN configuration logs, which makes it easier for physically proximate attackers to obtain sensitive information by reading a log file. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html - http://www.securitytracker.com/id/1032050 - http://www.securityfocus.com/bid/73978 - https://support.apple.com/HT204661
CVE ID: CVE-2015-1110 State: PUBLISHED Published: 2015-04-10T14:00:00 Last Updated: 2024-08-06T04:33:20.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Podcasts component in Apple iOS before 8.3 and Apple TV before 7.2 allows remote attackers to discover unique identifiers by reading asset-download request data. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html - http://www.securityfocus.com/bid/73983 - http://www.securitytracker.com/id/1032050 - https://support.apple.com/HT204662 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00003.html - https://support.apple.com/HT2
.com/HT204662 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00003.html - https://support.apple.com/HT204661
CVE ID: CVE-2015-1111 State: PUBLISHED Published: 2015-04-10T14:00:00 Last Updated: 2024-08-06T04:33:20.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: Safari in Apple iOS before 8.3 does not delete Recently Closed Tabs data in response to a history-clearing action, which allows attackers to obtain sensitive information by reading a history file. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html - http://www.securitytracker.com/id/1032050 - http://www.securityfocus.com/bid/73978 - https://support.apple.com/HT204661
CVE ID: CVE-2015-1112 State: PUBLISHED Published: 2015-04-10T14:00:00 Last Updated: 2024-08-06T04:33:20.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5, as used on iOS before 8.3 and other platforms, does not properly delete browsing-history data from the history.plist file, which allows attackers to obtain sensitive information by reading this file. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT204658 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html - http://lists.apple.com/archives/security-announce/2015/Apr/msg00000.html - http://www.se
nounce/2015/Apr/msg00002.html - http://lists.apple.com/archives/security-announce/2015/Apr/msg00000.html - http://www.securitytracker.com/id/1032047 - https://support.apple.com/HT204661
CVE ID: CVE-2015-1113 State: PUBLISHED Published: 2015-04-10T14:00:00 Last Updated: 2024-08-06T04:33:20.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Sandbox Profiles component in Apple iOS before 8.3 allows attackers to read the (1) telephone number or (2) e-mail address of a recent contact via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html - http://www.securitytracker.com/id/1032050 - http://www.securityfocus.com/bid/73978 - https://support.apple.com/HT204661
CVE ID: CVE-2015-1114 State: PUBLISHED Published: 2015-04-10T14:00:00 Last Updated: 2024-08-06T04:33:20.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Sandbox Profiles component in Apple iOS before 8.3 and Apple TV before 7.2 allows attackers to discover hardware identifiers via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html - http://www.securityfocus.com/bid/73983 - http://www.securitytracker.com/id/1032050 - https://support.apple.com/HT204662 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00003.html - https://support.apple.com/HT204661
CVE ID: CVE-2015-1115 State: PUBLISHED Published: 2015-04-10T14:00:00 Last Updated: 2024-08-06T04:33:20.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Telephony component in Apple iOS before 8.3 allows attackers to bypass a sandbox protection mechanism and access unintended telephone capabilities via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html - http://www.securitytracker.com/id/1032050 - http://www.securityfocus.com/bid/73978 - https://support.apple.com/HT204661
CVE ID: CVE-2015-1116 State: PUBLISHED Published: 2015-04-10T14:00:00 Last Updated: 2024-08-06T04:33:20.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: The UIKit View component in Apple iOS before 8.3 displays unblurred application snapshots in the Task Switcher, which makes it easier for physically proximate attackers to obtain sensitive information by reading the device screen. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html - http://www.securitytracker.com/id/1032050 - http://www.securityfocus.com/bid/73978 - https://support.apple.com/HT204661
CVE ID: CVE-2015-1117 State: PUBLISHED Published: 2015-04-10T14:00:00 Last Updated: 2024-08-06T04:33:20.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) setreuid and (2) setregid system-call implementations in the kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 do not properly perform privilege drops, which makes it easier for attackers to execute code with unintended user or group privileges via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT204659 - https://support.apple.com/kb/HT204870 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html - http://www
://support.apple.com/kb/HT204870 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html - http://www.securitytracker.com/id/1032048 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html - https://support.apple.com/HT204662 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00003.html - https://support.apple.com/HT204661
CVE ID: CVE-2015-1118 State: PUBLISHED Published: 2015-04-10T14:00:00 Last Updated: 2024-08-06T04:33:20.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: libnetcore in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 allows attackers to cause a denial of service (memory corruption and application crash) via a crafted configuration profile. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT204659 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html - http://www.securitytracker.com/id/1032048 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html - https://support.apple.co
ker.com/id/1032048 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html - https://support.apple.com/HT204662 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00003.html - https://support.apple.com/HT204661
CVE ID: CVE-2015-1119 State: PUBLISHED Published: 2015-04-10T14:00:00 Last Updated: 2024-08-06T04:33:20.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple iOS before 8.3, Apple TV before 7.2, and Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-04-08-1, APPLE-SA-2015-04-08-3, and APPLE-SA-2015-04-08-4. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT204658 - http://lists.apple.c
ditional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT204658 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html - http://lists.apple.com/archives/security-announce/2015/Jun/msg00006.html - http://lists.apple.com/archives/security-announce/2015/Apr/msg00000.html - http://www.securityfocus.com/bid/73972 - http://www.securitytracker.com/id/1032047 - https://support.apple.com/kb/HT204949 - https://support.apple.com/HT204662 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00003.html - https://support.apple.com/HT204661
CVE ID: CVE-2015-1120 State: PUBLISHED Published: 2015-04-10T14:00:00 Last Updated: 2024-08-06T04:33:20.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple iOS before 8.3, Apple TV before 7.2, and Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-04-08-1, APPLE-SA-2015-04-08-3, and APPLE-SA-2015-04-08-4. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT204658 - http://lists.apple.c
ditional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT204658 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html - http://lists.apple.com/archives/security-announce/2015/Jun/msg00006.html - http://lists.apple.com/archives/security-announce/2015/Apr/msg00000.html - http://www.securityfocus.com/bid/73972 - http://www.securitytracker.com/id/1032047 - https://support.apple.com/kb/HT204949 - https://support.apple.com/HT204662 - http://lists.opensuse.org/opensuse-updates/2016-03/msg00132.html - http://lists.apple.com/archives/security-announce/2015/Apr/msg00003.html - https://support.apple.com/HT204661 - http://www.ubuntu.com/usn/USN-2937
hives/security-announce/2015/Apr/msg00003.html - https://support.apple.com/HT204661 - http://www.ubuntu.com/usn/USN-2937-1
CVE ID: CVE-2015-1121 State: PUBLISHED Published: 2015-04-10T14:00:00 Last Updated: 2024-08-06T04:33:20.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple iOS before 8.3, Apple TV before 7.2, and Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-04-08-1, APPLE-SA-2015-04-08-3, and APPLE-SA-2015-04-08-4. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT204658 - http://lists.apple.c
CVE ID: CVE-2015-1122 State: PUBLISHED Published: 2015-04-10T14:00:00 Last Updated: 2024-08-06T04:33:20.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple iOS before 8.3, Apple TV before 7.2, and Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-04-08-1, APPLE-SA-2015-04-08-3, and APPLE-SA-2015-04-08-4. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT204658 - http://lists.apple.c
ditional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT204658 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html - http://lists.apple.com/archives/security-announce/2015/Jun/msg00006.html - http://lists.apple.com/archives/security-announce/2015/Apr/msg00000.html - http://www.securityfocus.com/bid/73972 - http://lists.opensuse.org/opensuse-updates/2016-03/msg00054.html - http://www.securitytracker.com/id/1032047 - https://support.apple.com/kb/HT204949 - https://support.apple.com/HT204662 - http://lists.opensuse.org/opensuse-updates/2016-03/msg00132.html - http://lists.apple.com/archives/security-announce/2015/Apr/msg00003.html - http
opensuse-updates/2016-03/msg00132.html - http://lists.apple.com/archives/security-announce/2015/Apr/msg00003.html - https://support.apple.com/HT204661 - http://www.ubuntu.com/usn/USN-2937-1
CVE ID: CVE-2015-1123 State: PUBLISHED Published: 2015-04-10T14:00:00 Last Updated: 2024-08-06T04:33:20.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple iOS before 8.3 and Apple TV before 7.2, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-04-08-3 and APPLE-SA-2015-04-08-4. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html - http://www.securitytracker.com/id/1032050 - https://support.apple.com/HT20
es/security-announce/2015/Apr/msg00002.html - http://www.securitytracker.com/id/1032050 - https://support.apple.com/HT204662 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00003.html - https://support.apple.com/HT204661
CVE ID: CVE-2015-1124 State: PUBLISHED Published: 2015-04-10T14:00:00 Last Updated: 2024-08-06T04:33:20.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple iOS before 8.3, Apple TV before 7.2, and Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-04-08-1, APPLE-SA-2015-04-08-3, and APPLE-SA-2015-04-08-4. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT204658 - http://lists.apple.c
CVE ID: CVE-2015-1125 State: PUBLISHED Published: 2015-04-10T14:00:00 Last Updated: 2024-08-06T04:33:20.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: The touch-events implementation in WebKit in Apple iOS before 8.3 allows remote attackers to trigger an association between a tap and an unintended web resource via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html - http://www.securitytracker.com/id/1032050 - https://support.apple.com/HT204661
CVE ID: CVE-2015-1126 State: PUBLISHED Published: 2015-04-10T14:00:00 Last Updated: 2024-08-06T04:33:20.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple iOS before 8.3 and Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5, does not properly handle the userinfo field in FTP URLs, which allows remote attackers to trigger incorrect resource access via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT204658 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.html - http://lists.apple.com/archives/security-announce/2015/Apr/msg00000.html - http://www.securityt
2015/Apr/msg00002.html - http://lists.apple.com/archives/security-announce/2015/Apr/msg00000.html - http://www.securitytracker.com/id/1032047 - https://support.apple.com/HT204661
CVE ID: CVE-2015-1127 State: PUBLISHED Published: 2015-04-10T14:00:00 Last Updated: 2024-08-06T04:33:20.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: The private-browsing implementation in WebKit in Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5 places browsing history into an index, which might allow local users to obtain sensitive information by reading index entries. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT204658 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00000.html - http://www.securitytracker.com/id/1032047 - http://lists.opensuse.org/opensuse-updates/2016-03/msg00132.html - ht
html - http://www.securitytracker.com/id/1032047 - http://lists.opensuse.org/opensuse-updates/2016-03/msg00132.html - http://www.ubuntu.com/usn/USN-2937-1
CVE ID: CVE-2015-1128 State: PUBLISHED Published: 2015-04-10T14:00:00 Last Updated: 2024-08-06T04:33:20.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: The private-browsing implementation in Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5 allows attackers to obtain sensitive browsing-history information via vectors involving push-notification requests. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT204658 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00000.html - http://www.securitytracker.com/id/1032047
CVE ID: CVE-2015-1129 State: PUBLISHED Published: 2015-04-10T14:00:00 Last Updated: 2024-08-06T04:33:20.706Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5 does not properly select X.509 client certificates, which makes it easier for remote attackers to track users via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT204658 - https://support.apple.com/HT205212 - http://lists.apple.com/archives/security-announce/2015/Apr/msg00000.html - http://www.securitytracker.com/id/1032047 - http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.html