Browse CVEs

HIGH 9.3 CVE-2015-7055 AppleMobileFileIntegrity in Apple iOS before 9.2 and tvOS before 9.1 does not prevent changes to access-control structures, which allows attackers to… Tvos after 9.1 Fix from $1,9502015-12-11 MEDIUM 6.8 CVE-2015-7054 zlib in the Compression component in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 does not initialize memory fo… Iphone Os after 10.11.1 Fix from $1,6002015-12-11 MEDIUM 6.8 CVE-2015-7053 ImageIO in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or ca… Tvos after 10.11.1 Fix from $1,6002015-12-11 HIGH 7.2 CVE-2015-7052 kext tools in Apple OS X before 10.11.2 mishandles kernel-extension loading, which allows local users to gain privileges via unspecified vectors. Mac Os X after 10.11.1 Fix from $1,9502015-12-11 HIGH 9.3 CVE-2015-7051 MobileStorageMounter in Apple iOS before 9.2 and tvOS before 9.1 mishandles the timing of trust-cache loading, which allows attackers to execute arbi… Iphone Os after 9.1 Fix from $1,9502015-12-11 MEDIUM 6.8 CVE-2015-7048 WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of servi… Safari after 9.1 Fix from $1,6002015-12-11 HIGH 7.2 CVE-2015-7047 The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to gain privileges via a crafted … Watchos after 10.11.1 Fix from $1,9502015-12-11 MEDIUM 5.0 CVE-2015-7045 Keychain Access in Apple OS X before 10.11.2 and tvOS before 9.1 improperly interacts with Keychain Agent, which allows attackers to spoof the Keycha… Tvos after 10.11.1 Fix from $1,6002015-12-11 HIGH 7.6 CVE-2015-7044 The System Integrity Protection feature in Apple OS X before 10.11.2 mishandles union mounts, which allows attackers to execute arbitrary code in a p… Mac Os X after 10.11.1 Fix from $1,9502015-12-11 MEDIUM 6.8 CVE-2015-7039EPSS 11% Buffer overflow in libc in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbi… Tvos after 10.11.1 Fix from $1,6002015-12-11 MEDIUM 6.8 CVE-2015-7038 Buffer overflow in libc in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbi… Tvos after 10.11.1 Fix from $1,6002015-12-11 MEDIUM 5.0 CVE-2015-7037 Directory traversal vulnerability in Mobile Backup in Photos in Apple iOS before 9.2 allows attackers to read arbitrary files via a crafted pathname. Iphone Os after 9.1 Fix from $1,6002015-12-11 MEDIUM 6.8 CVE-2015-7001 AppSandbox in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 mishandles hard links, which allows attackers to byp… Watchos after 10.11.1 Fix from $1,6002015-12-11 HIGH 7.5 CVE-2015-7036EPSS 39% The fts3_tokenizer function in SQLite, as used in Apple iOS before 8.4 and OS X before 10.10.4, allows remote attackers to execute arbitrary code or … Mac Os X after 10.10.3 Fix from $1,9502015-11-22 MEDIUM 5.0 CVE-2015-7995 The xsltStylePreCompute function in preproc.c in libxslt 1.1.28 does not check if the parent node is an element, which allows attackers to cause a de… Iphone Os after 10.11.2 Fix from $1,6002015-11-17 MEDIUM 5.8 CVE-2015-7023 CFNetwork in Apple iOS before 9.1 and OS X before 10.11.1 does not properly consider the uppercase-versus-lowercase distinction during cookie parsing… Mac Os X after 10.11.0 Fix from $1,6002015-10-23 HIGH 7.2 CVE-2015-7021 The Graphics Drivers subsystem in Apple OS X before 10.11.1 allows local users to gain privileges or cause a denial of service (kernel memory corrupt… Mac Os X after 10.11.0 Fix from $1,9502015-10-23 MEDIUM 5.6 CVE-2015-7020 The NVIDIA driver in the Graphics Drivers subsystem in Apple OS X before 10.11.1 allows local users to obtain sensitive information from kernel memor… Mac Os X after 10.11.0 Fix from $1,6002015-10-23 MEDIUM 5.6 CVE-2015-7019 The NVIDIA driver in the Graphics Drivers subsystem in Apple OS X before 10.11.1 allows local users to obtain sensitive information from kernel memor… Mac Os X after 10.11.0 Fix from $1,6002015-10-23 MEDIUM 6.8 CVE-2015-7018 FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory cor… Iphone Os after 10.11.0 Fix from $1,6002015-10-23 HIGH 7.6 CVE-2015-7016 The MCX Application Restrictions component in Apple OS X before 10.11.1, when Managed Configuration is enabled, mishandles provisioning profiles, whi… Mac Os X after 10.11.0 Fix from $1,9502015-10-23 MEDIUM 6.8 CVE-2015-7015 Heap-based buffer overflow in the DNS client library in configd in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows attacke… Iphone Os after 10.11.0 Fix from $1,6002015-10-23 MEDIUM 6.8 CVE-2015-7013 WebKit, as used in Apple Safari before 9.0.1 and iTunes before 12.3.1, allows remote attackers to execute arbitrary code or cause a denial of service… Itunes after 12.3.0 Fix from $1,6002015-10-23 MEDIUM 6.8 CVE-2015-7014 WebKit, as used in Apple iOS before 9.1, Safari before 9.0.1, and iTunes before 12.3.1, allows remote attackers to execute arbitrary code or cause a … Safari after 12.3.0 Fix from $1,6002015-10-23 MEDIUM 6.8 CVE-2015-7012 WebKit, as used in Apple iOS before 9.1, Safari before 9.0.1, and iTunes before 12.3.1, allows remote attackers to execute arbitrary code or cause a … Safari after 12.3.0 Fix from $1,6002015-10-23 MEDIUM 6.8 CVE-2015-7011 WebKit, as used in Apple Safari before 9.0.1 and iTunes before 12.3.1, allows remote attackers to execute arbitrary code or cause a denial of service… Safari after 12.3.0 Fix from $1,6002015-10-23 MEDIUM 6.8 CVE-2015-7010 FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory cor… Iphone Os after 10.11.0 Fix from $1,6002015-10-23 MEDIUM 6.8 CVE-2015-7009 FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory cor… Iphone Os after 10.11.0 Fix from $1,6002015-10-23 HIGH 7.5 CVE-2015-7007EPSS 53% Script Editor in Apple OS X before 10.11.1 allows remote attackers to bypass an intended user-confirmation requirement for AppleScript execution via … Mac Os X after 10.11.0 Fix from $1,9502015-10-23 MEDIUM 6.8 CVE-2015-7008 FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory cor… Iphone Os after 10.11.0 Fix from $1,6002015-10-23