The kernel in Apple iOS before 8.4.1 does not properly restrict debugging features, which allows attackers to bypass background-execution limitations via a crafted app. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.
Apple
Privilege Escalation
Iphone Os
NVD
CVSS 2.0
4.3
EPSS
0.5%
The CFNetwork HTTPProtocol component in Apple iOS before 9 and OS X before 10.11 does not properly recognize the HSTS preload list during a Safari private-browsing session, which makes it easier for. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.
Apple
Information Disclosure
Mac Os X
Iphone Os
NVD
CVSS 2.0
4.3
EPSS
0.2%