Latest CVE Feed
-
2.1
LOWCVE-2015-7067
IOThunderboltFamily in Apple OS X before 10.11.2 allows local users to cause a denial of service (NULL pointer dereference) via an unspecified userclient type.... Read more
- EPSS Score: %0.06
- Published: Dec. 11, 2015
- Modified: Apr. 12, 2025
-
6.8
MEDIUMCVE-2015-7066
OpenGL in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2015... Read more
- EPSS Score: %1.23
- Published: Dec. 11, 2015
- Modified: Apr. 12, 2025
-
6.8
MEDIUMCVE-2015-7065
OpenGL in Apple iOS before 9.2, OS X before 10.11.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.... Read more
- EPSS Score: %1.87
- Published: Dec. 11, 2015
- Modified: Apr. 12, 2025
-
6.8
MEDIUMCVE-2015-7064
OpenGL in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2015... Read more
- EPSS Score: %1.23
- Published: Dec. 11, 2015
- Modified: Apr. 12, 2025
-
7.2
HIGHCVE-2015-7063
The kernel loader in EFI in Apple OS X before 10.11.2 allows local users to gain privileges via a crafted pathname.... Read more
- EPSS Score: %0.05
- Published: Dec. 11, 2015
- Modified: Apr. 12, 2025
-
4.6
MEDIUMCVE-2015-7062
Apple OS X before 10.11.2 and tvOS before 9.1 allow local users to bypass intended configuration-profile installation restrictions via unspecified vectors.... Read more
- EPSS Score: %0.06
- Published: Dec. 11, 2015
- Modified: Apr. 12, 2025
-
6.8
MEDIUMCVE-2015-7061
The ASN.1 decoder in Apple OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted certificate, a different vulnerability than CVE-2015-7... Read more
- EPSS Score: %1.37
- Published: Dec. 11, 2015
- Modified: Apr. 12, 2025
-
6.8
MEDIUMCVE-2015-7060
The ASN.1 decoder in Apple OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted certificate, a different vulnerability than CVE-2015-7... Read more
- EPSS Score: %1.37
- Published: Dec. 11, 2015
- Modified: Apr. 12, 2025
-
6.8
MEDIUMCVE-2015-7059
The ASN.1 decoder in Apple OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted certificate, a different vulnerability than CVE-2015-7... Read more
- EPSS Score: %1.37
- Published: Dec. 11, 2015
- Modified: Apr. 12, 2025
-
4.3
MEDIUMCVE-2015-7058
Apple iOS before 9.2, OS X before 10.11.2, and tvOS before 9.1 improperly validate keychain item ACLs, which allows attackers to obtain access to keychain items via a crafted app.... Read more
- EPSS Score: %0.52
- Published: Dec. 11, 2015
- Modified: Apr. 12, 2025
-
4.6
MEDIUMCVE-2015-7057
otools in Apple Xcode before 7.2 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted mach-o file, a different vulnerability than CVE-2015-7049.... Read more
Affected Products : xcode- EPSS Score: %0.07
- Published: Dec. 11, 2015
- Modified: Apr. 12, 2025
-
5.0
MEDIUMCVE-2015-7056
IDE SCM in Apple Xcode before 7.2 does not recognize .gitignore files, which allows remote attackers to obtain sensitive information in opportunistic circumstances by leveraging the presence of a file matching an ignore pattern.... Read more
Affected Products : xcode- EPSS Score: %0.31
- Published: Dec. 11, 2015
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2015-7055
AppleMobileFileIntegrity in Apple iOS before 9.2 and tvOS before 9.1 does not prevent changes to access-control structures, which allows attackers to execute arbitrary code in a privileged context via a crafted app.... Read more
- EPSS Score: %0.62
- Published: Dec. 11, 2015
- Modified: Apr. 12, 2025
-
6.8
MEDIUMCVE-2015-7054
zlib in the Compression component in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 does not initialize memory for an unspecified data structure, which allows remote attackers to execute arbitrary code via a crafted web... Read more
- EPSS Score: %1.14
- Published: Dec. 11, 2015
- Modified: Apr. 12, 2025
-
6.8
MEDIUMCVE-2015-7053
ImageIO in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted image.... Read more
- EPSS Score: %3.40
- Published: Dec. 11, 2015
- Modified: Apr. 12, 2025
-
7.2
HIGHCVE-2015-7052
kext tools in Apple OS X before 10.11.2 mishandles kernel-extension loading, which allows local users to gain privileges via unspecified vectors.... Read more
- EPSS Score: %0.05
- Published: Dec. 11, 2015
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2015-7051
MobileStorageMounter in Apple iOS before 9.2 and tvOS before 9.1 mishandles the timing of trust-cache loading, which allows attackers to execute arbitrary code in a privileged context via a crafted app.... Read more
- EPSS Score: %0.76
- Published: Dec. 11, 2015
- Modified: Apr. 12, 2025
-
4.3
MEDIUMCVE-2015-7050
WebKit in Apple iOS before 9.2 and Safari before 9.0.2 misparses content extensions, which allows remote attackers to obtain sensitive browsing-history information via a crafted web site.... Read more
- EPSS Score: %0.58
- Published: Dec. 11, 2015
- Modified: Apr. 12, 2025
-
4.6
MEDIUMCVE-2015-7049
otools in Apple Xcode before 7.2 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted mach-o file, a different vulnerability than CVE-2015-7057.... Read more
Affected Products : xcode- EPSS Score: %0.07
- Published: Dec. 11, 2015
- Modified: Apr. 12, 2025
-
6.8
MEDIUMCVE-2015-7048
WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-20... Read more
- EPSS Score: %1.01
- Published: Dec. 11, 2015
- Modified: Apr. 12, 2025