CVE-2015-5839

dyld in Apple iOS before 9 allows attackers to bypass a code-signing protection mechanism via an app that places a crafted signature in an executable file.

• CWE-254

• http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.htmlVendor Advisory
• http://lists.apple.com/archives/security-announce/2015/Sep/msg00005.htmlVendor Advisory
• http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.htmlVendor Advisory
• http://www.securityfocus.com/bid/76764
• http://www.securitytracker.com/id/1033609
• https://support.apple.com/HT205212Vendor Advisory
• https://support.apple.com/HT205213Vendor Advisory
• https://support.apple.com/HT205267Vendor Advisory
• http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.htmlVendor Advisory
• http://lists.apple.com/archives/security-announce/2015/Sep/msg00005.htmlVendor Advisory
• http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.htmlVendor Advisory
• http://www.securityfocus.com/bid/76764
• http://www.securitytracker.com/id/1033609
• https://support.apple.com/HT205212Vendor Advisory
• https://support.apple.com/HT205213Vendor Advisory
• https://support.apple.com/HT205267Vendor Advisory

Published

Sep 18, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-5833The Login Window component in Apple OS X before 10.11 does n…
• CVE-2015-5834IOAcceleratorFamily in Apple iOS before 9 allows attackers t…
• CVE-2015-5835Apple iOS before 9 allows attackers to obtain sensitive info…
• CVE-2015-5836Apple Online Store Kit in Apple OS X before 10.11 improperly…
• CVE-2015-5837PluginKit in Apple iOS before 9 allows attackers to bypass a…
• CVE-2015-5838SpringBoard in Apple iOS before 9 does not properly restrict…
• CVE-2015-5840The checkint division routines in removefile in Apple iOS be…
• CVE-2015-5841The CFNetwork Proxies component in Apple iOS before 9 does n…
• CVE-2015-5842XNU in the kernel in Apple iOS before 9 does not properly in…
• CVE-2015-5843IOMobileFrameBuffer in Apple iOS before 9 allows local users…
• CVE-2015-5844IOKit in the kernel in Apple iOS before 9 allows attackers t…
• CVE-2015-5845IOKit in the kernel in Apple iOS before 9 allows attackers t…