Vulnerability index

Browse CVEs

6,692 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Tvos HIGH 9.3
CVE-2015-7055

AppleMobileFileIntegrity in Apple iOS before 9.2 and tvOS before 9.1 does not prevent changes to access-control structures, which allows attackers to…

Fix: after 9.1
Fix from $1,950 2015-12-11
Iphone Os MEDIUM 6.8
CVE-2015-7054

zlib in the Compression component in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 does not initialize memory fo…

Fix: after 10.11.1
Fix from $1,600 2015-12-11
Tvos MEDIUM 6.8
CVE-2015-7053

ImageIO in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or ca…

Fix: after 10.11.1
Fix from $1,600 2015-12-11
Mac Os X HIGH 7.2
CVE-2015-7052

kext tools in Apple OS X before 10.11.2 mishandles kernel-extension loading, which allows local users to gain privileges via unspecified vectors.

Fix: after 10.11.1
Fix from $1,950 2015-12-11
Iphone Os HIGH 9.3
CVE-2015-7051

MobileStorageMounter in Apple iOS before 9.2 and tvOS before 9.1 mishandles the timing of trust-cache loading, which allows attackers to execute arbi…

Fix: after 9.1
Fix from $1,950 2015-12-11
Safari MEDIUM 6.8
CVE-2015-7048

WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of servi…

Fix: after 9.1
Fix from $1,600 2015-12-11
Watchos HIGH 7.2
CVE-2015-7047

The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to gain privileges via a crafted …

Fix: after 10.11.1
Fix from $1,950 2015-12-11
Tvos MEDIUM 5.0
CVE-2015-7045

Keychain Access in Apple OS X before 10.11.2 and tvOS before 9.1 improperly interacts with Keychain Agent, which allows attackers to spoof the Keycha…

Fix: after 10.11.1
Fix from $1,600 2015-12-11
Mac Os X HIGH 7.6
CVE-2015-7044

The System Integrity Protection feature in Apple OS X before 10.11.2 mishandles union mounts, which allows attackers to execute arbitrary code in a p…

Fix: after 10.11.1
Fix from $1,950 2015-12-11
Tvos MEDIUM 6.8
CVE-2015-7039EPSS 11%

Buffer overflow in libc in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbi…

Fix: after 10.11.1
Fix from $1,600 2015-12-11
Tvos MEDIUM 6.8
CVE-2015-7038

Buffer overflow in libc in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbi…

Fix: after 10.11.1
Fix from $1,600 2015-12-11
Iphone Os MEDIUM 5.0
CVE-2015-7037

Directory traversal vulnerability in Mobile Backup in Photos in Apple iOS before 9.2 allows attackers to read arbitrary files via a crafted pathname.

Fix: after 9.1
Fix from $1,600 2015-12-11
Watchos MEDIUM 6.8
CVE-2015-7001

AppSandbox in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 mishandles hard links, which allows attackers to byp…

Fix: after 10.11.1
Fix from $1,600 2015-12-11
Mac Os X HIGH 7.5
CVE-2015-7036EPSS 39%

The fts3_tokenizer function in SQLite, as used in Apple iOS before 8.4 and OS X before 10.10.4, allows remote attackers to execute arbitrary code or …

Fix: after 10.10.3
Fix from $1,950 2015-11-22
Iphone Os MEDIUM 5.0
CVE-2015-7995

The xsltStylePreCompute function in preproc.c in libxslt 1.1.28 does not check if the parent node is an element, which allows attackers to cause a de…

Fix: after 10.11.2
Fix from $1,600 2015-11-17
Mac Os X MEDIUM 5.8
CVE-2015-7023

CFNetwork in Apple iOS before 9.1 and OS X before 10.11.1 does not properly consider the uppercase-versus-lowercase distinction during cookie parsing…

Fix: after 10.11.0
Fix from $1,600 2015-10-23
Mac Os X HIGH 7.2
CVE-2015-7021

The Graphics Drivers subsystem in Apple OS X before 10.11.1 allows local users to gain privileges or cause a denial of service (kernel memory corrupt…

Fix: after 10.11.0
Fix from $1,950 2015-10-23
Mac Os X MEDIUM 5.6
CVE-2015-7020

The NVIDIA driver in the Graphics Drivers subsystem in Apple OS X before 10.11.1 allows local users to obtain sensitive information from kernel memor…

Fix: after 10.11.0
Fix from $1,600 2015-10-23
Mac Os X MEDIUM 5.6
CVE-2015-7019

The NVIDIA driver in the Graphics Drivers subsystem in Apple OS X before 10.11.1 allows local users to obtain sensitive information from kernel memor…

Fix: after 10.11.0
Fix from $1,600 2015-10-23
Iphone Os MEDIUM 6.8
CVE-2015-7018

FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory cor…

Fix: after 10.11.0
Fix from $1,600 2015-10-23
Mac Os X HIGH 7.6
CVE-2015-7016

The MCX Application Restrictions component in Apple OS X before 10.11.1, when Managed Configuration is enabled, mishandles provisioning profiles, whi…

Fix: after 10.11.0
Fix from $1,950 2015-10-23
Iphone Os MEDIUM 6.8
CVE-2015-7015

Heap-based buffer overflow in the DNS client library in configd in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows attacke…

Fix: after 10.11.0
Fix from $1,600 2015-10-23
Itunes MEDIUM 6.8
CVE-2015-7013

WebKit, as used in Apple Safari before 9.0.1 and iTunes before 12.3.1, allows remote attackers to execute arbitrary code or cause a denial of service…

Fix: after 12.3.0
Fix from $1,600 2015-10-23
Safari MEDIUM 6.8
CVE-2015-7014

WebKit, as used in Apple iOS before 9.1, Safari before 9.0.1, and iTunes before 12.3.1, allows remote attackers to execute arbitrary code or cause a …

Fix: after 12.3.0
Fix from $1,600 2015-10-23
Safari MEDIUM 6.8
CVE-2015-7012

WebKit, as used in Apple iOS before 9.1, Safari before 9.0.1, and iTunes before 12.3.1, allows remote attackers to execute arbitrary code or cause a …

Fix: after 12.3.0
Fix from $1,600 2015-10-23
Safari MEDIUM 6.8
CVE-2015-7011

WebKit, as used in Apple Safari before 9.0.1 and iTunes before 12.3.1, allows remote attackers to execute arbitrary code or cause a denial of service…

Fix: after 12.3.0
Fix from $1,600 2015-10-23
Iphone Os MEDIUM 6.8
CVE-2015-7010

FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory cor…

Fix: after 10.11.0
Fix from $1,600 2015-10-23
Iphone Os MEDIUM 6.8
CVE-2015-7009

FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory cor…

Fix: after 10.11.0
Fix from $1,600 2015-10-23
Mac Os X HIGH 7.5
CVE-2015-7007EPSS 53%

Script Editor in Apple OS X before 10.11.1 allows remote attackers to bypass an intended user-confirmation requirement for AppleScript execution via …

Fix: after 10.11.0
Fix from $1,950 2015-10-23
Iphone Os MEDIUM 6.8
CVE-2015-7008

FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory cor…

Fix: after 10.11.0
Fix from $1,600 2015-10-23