About the security content of Safari 9 - Apple Support

Linked CVE reports

These are source relationships, not a claim that this article fixes every affected product or branch.

• CVE-2015-5828n/a: Improper Input Validation
• CVE-2015-5800n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-5822n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-5808n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-5813n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-5810n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-5791n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-5812n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-5803n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-5794n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-5801n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-5806n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-5798n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-5819n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-5805n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-5799n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-5817n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-5821n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-5789n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-5811n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-5826n/a: Improper Access Control
• CVE-2015-5827n/a: Exposure of Sensitive Information to an Unauthorized Actor
• CVE-2015-5825n/a: Exposure of Sensitive Information to an Unauthorized Actor
• CVE-2015-5815n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-5818n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-5802n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-5767The user interface in Safari in Apple iOS before 9 allows remote attackers to spoof URLs via unspecified vectors, a different vulnerability than CVE-2015-5764 and CVE-2015-5765
• CVE-2015-5816n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-5814n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-5792n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-5797n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-5788The WebKit Canvas implementation in Apple iOS before 9 allows remote attackers to bypass the Same Origin Policy and obtain sensitive image information via vectors involving a CANVAS element
• CVE-2015-5804n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-5823n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-5795n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-5796n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-5807n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-5790n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-5809n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-5793n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-5764The user interface in Safari in Apple iOS before 9 allows remote attackers to spoof URLs via unspecified vectors, a different vulnerability than CVE-2015-5765 and CVE-2015-5767
• CVE-2015-5820WebKit in Apple iOS before 9 allows remote attackers to trigger a dialing action via a crafted (1) tel://, (2) facetime://, or (3) facetime-audio:// URL
• CVE-2015-5780The Safari Extensions implementation in Apple Safari before 9 does not require user confirmation before replacing an installed extension, which has unspecified impact and attack vectors
• CVE-2015-5765The user interface in Safari in Apple iOS before 9 allows remote attackers to spoof URLs via unspecified vectors, a different vulnerability than CVE-2015-5764 and CVE-2015-5767
• CVE-2015-3801n/a: security vulnerability

Source and provenance

Original title: About the security content of Safari 9 - Apple Support. Captured 17 Oct 2026, 20:01 UTC. The stored article is used for enrichment and change detection; BlackTree does not republish the publisher's full text here.