CVE-2015-5916

The Apple Pay component in Apple iOS before 9 allows remote terminals to obtain sensitive recent-transaction information during payments by leveraging the transaction-log feature.

• CWE-200

• http://lists.apple.com/archives/security-announce/2015/Oct/msg00003.html
• http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.htmlVendor Advisory
• http://lists.apple.com/archives/security-announce/2015/Sep/msg00005.htmlVendor Advisory
• http://www.securityfocus.com/bid/76764
• http://www.securitytracker.com/id/1033609
• https://support.apple.com/HT205212Vendor Advisory
• https://support.apple.com/HT205213Vendor Advisory
• https://support.apple.com/HT205378
• http://lists.apple.com/archives/security-announce/2015/Oct/msg00003.html
• http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.htmlVendor Advisory
• http://lists.apple.com/archives/security-announce/2015/Sep/msg00005.htmlVendor Advisory
• http://www.securityfocus.com/bid/76764
• http://www.securitytracker.com/id/1033609
• https://support.apple.com/HT205212Vendor Advisory
• https://support.apple.com/HT205213Vendor Advisory
• https://support.apple.com/HT205378

Published

Sep 18, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-5910IDE Xcode Server in Apple Xcode before 7.0 does not ensure t…
• CVE-2015-5911Multiple unspecified vulnerabilities in Twisted in Wiki Serv…
• CVE-2015-5912The CFNetwork FTPProtocol component in Apple iOS before 9 al…
• CVE-2015-5913Heimdal, as used in Apple OS X before 10.11, allows remote a…
• CVE-2015-5914The EFI component in Apple OS X before 10.11 allows physical…
• CVE-2015-5915Apple OS X before 10.11 does not ensure that the keychain's …
• CVE-2015-5917The glob implementation in tnftpd (formerly lukemftpd), as u…
• CVE-2015-5918GasGauge in Apple watchOS before 2 allows local users to gai…
• CVE-2015-5919GasGauge in Apple watchOS before 2 allows local users to gai…
• CVE-2015-5920The Software Update component in Apple iTunes before 12.3 do…
• CVE-2015-5921WebKit in Apple iOS before 9 mishandles "Content-Disposition…
• CVE-2015-5922Unspecified vulnerability in International Components for Un…