Latest CVE Feed
-
6.8
MEDIUMCVE-2015-6989
Grand Central Dispatch in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted package that is mishandled during dispatch calls.... Read more
- EPSS Score: %1.00
- Published: Oct. 23, 2015
- Modified: Apr. 12, 2025
-
10.0
HIGHCVE-2015-6988
The kernel in Apple iOS before 9.1 and OS X before 10.11.1 does not initialize an unspecified data structure, which allows remote attackers to execute arbitrary code via vectors involving an unknown network-connectivity requirement.... Read more
- EPSS Score: %11.01
- Published: Oct. 23, 2015
- Modified: Apr. 12, 2025
-
2.1
LOWCVE-2015-6987
The File Bookmark component in Apple OS X before 10.11.1 allows local users to cause a denial of service (application crash) via crafted bookmark metadata in a folder.... Read more
- EPSS Score: %0.04
- Published: Oct. 23, 2015
- Modified: Apr. 12, 2025
-
6.8
MEDIUMCVE-2015-6985
Apple Type Services (ATS) in Apple OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web page.... Read more
- EPSS Score: %1.10
- Published: Oct. 23, 2015
- Modified: Apr. 12, 2025
-
8.8
HIGHCVE-2015-6984
libarchive in Apple OS X before 10.11.1 allows attackers to write to arbitrary files via a crafted app that conducts an unspecified symlink attack.... Read more
- EPSS Score: %0.35
- Published: Oct. 23, 2015
- Modified: Apr. 12, 2025
-
8.8
HIGHCVE-2015-6983
Double free vulnerability in Apple iOS before 9.1 and OS X before 10.11.1 allows attackers to write to arbitrary files via a crafted app that accesses AtomicBufferedFile descriptors.... Read more
- EPSS Score: %0.96
- Published: Oct. 23, 2015
- Modified: Apr. 12, 2025
-
6.8
MEDIUMCVE-2015-6978
FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6976, CVE-2015-6977, CVE-2015-69... Read more
- EPSS Score: %3.77
- Published: Oct. 23, 2015
- Modified: Apr. 12, 2025
-
6.8
MEDIUMCVE-2015-6977
FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6976, CVE-2015-6978, CVE-2015-69... Read more
- EPSS Score: %2.10
- Published: Oct. 23, 2015
- Modified: Apr. 12, 2025
-
6.8
MEDIUMCVE-2015-6976
FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6977, CVE-2015-6978, CVE-2015-69... Read more
- EPSS Score: %2.10
- Published: Oct. 23, 2015
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2015-6974
IOHIDFamily in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.... Read more
- EPSS Score: %1.08
- Published: Oct. 23, 2015
- Modified: Apr. 12, 2025
-
7.2
HIGHCVE-2015-5945
The Sandbox subsystem in Apple OS X before 10.11.1 allows local users to gain privileges via vectors involving NVRAM parameters.... Read more
- EPSS Score: %0.04
- Published: Oct. 23, 2015
- Modified: Apr. 12, 2025
-
6.8
MEDIUMCVE-2015-5944
CoreText in Apple OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file.... Read more
- EPSS Score: %1.16
- Published: Oct. 23, 2015
- Modified: Apr. 12, 2025
-
4.3
MEDIUMCVE-2015-5943
SecurityAgent in Apple OS X before 10.11.1 does not prevent synthetic clicks from reaching keychain windows, which allows attackers to bypass intended access restrictions via a crafted app.... Read more
- EPSS Score: %0.22
- Published: Oct. 23, 2015
- Modified: Apr. 12, 2025
-
6.8
MEDIUMCVE-2015-5942
FontParser in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-5927.... Read more
- EPSS Score: %1.87
- Published: Oct. 23, 2015
- Modified: Apr. 12, 2025
-
6.8
MEDIUMCVE-2015-5940
The Accelerate Framework component in Apple iOS before 9.1 and OS X before 10.11.1, when multi-threading is enabled, omits certain validation and locking steps, which allows remote attackers to execute arbitrary code or cause a denial of service (memory c... Read more
- EPSS Score: %1.87
- Published: Oct. 23, 2015
- Modified: Apr. 12, 2025
-
6.8
MEDIUMCVE-2015-5939
ImageIO in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted metadata in an image, a different vulnerability than CVE-2015-593... Read more
- EPSS Score: %2.51
- Published: Oct. 23, 2015
- Modified: Apr. 12, 2025
-
6.8
MEDIUMCVE-2015-5938
ImageIO in Apple OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted metadata in an image.... Read more
- EPSS Score: %1.24
- Published: Oct. 23, 2015
- Modified: Apr. 12, 2025
-
6.8
MEDIUMCVE-2015-5937
ImageIO in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted metadata in an image, a different vulnerability than CVE-2015-593... Read more
- EPSS Score: %2.51
- Published: Oct. 23, 2015
- Modified: Apr. 12, 2025
-
6.8
MEDIUMCVE-2015-5936
ImageIO in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted metadata in an image, a different vulnerability than CVE-2015-593... Read more
- EPSS Score: %2.51
- Published: Oct. 23, 2015
- Modified: Apr. 12, 2025
-
6.8
MEDIUMCVE-2015-5935
ImageIO in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted metadata in an image, a different vulnerability than CVE-2015-593... Read more
- EPSS Score: %2.83
- Published: Oct. 23, 2015
- Modified: Apr. 12, 2025