Latest CVE Feed
-
6.8
MEDIUMCVE-2015-7012
WebKit, as used in Apple iOS before 9.1, Safari before 9.0.1, and iTunes before 12.3.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerabil... Read more
- EPSS Score: %1.64
- Published: Oct. 23, 2015
- Modified: Apr. 12, 2025
-
6.8
MEDIUMCVE-2015-7011
WebKit, as used in Apple Safari before 9.0.1 and iTunes before 12.3.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other We... Read more
- EPSS Score: %1.66
- Published: Oct. 23, 2015
- Modified: Apr. 12, 2025
-
6.8
MEDIUMCVE-2015-7010
FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6976, CVE-2015-6977, CVE-2015-69... Read more
- EPSS Score: %1.87
- Published: Oct. 23, 2015
- Modified: Apr. 12, 2025
-
6.8
MEDIUMCVE-2015-7009
FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6976, CVE-2015-6977, CVE-2015-69... Read more
- EPSS Score: %1.87
- Published: Oct. 23, 2015
- Modified: Apr. 12, 2025
-
6.8
MEDIUMCVE-2015-7008
FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6976, CVE-2015-6977, CVE-2015-69... Read more
- EPSS Score: %1.87
- Published: Oct. 23, 2015
- Modified: Apr. 12, 2025
-
7.5
HIGHCVE-2015-7007
Script Editor in Apple OS X before 10.11.1 allows remote attackers to bypass an intended user-confirmation requirement for AppleScript execution via unspecified vectors.... Read more
- EPSS Score: %78.16
- Published: Oct. 23, 2015
- Modified: Apr. 12, 2025
-
6.8
MEDIUMCVE-2015-7006
Directory traversal vulnerability in the BOM (aka Bill of Materials) component in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code via a crafted CPIO archive.... Read more
- EPSS Score: %1.26
- Published: Oct. 23, 2015
- Modified: Apr. 12, 2025
-
6.8
MEDIUMCVE-2015-7003
coreaudiod in Audio in Apple OS X before 10.11.1 does not initialize an unspecified data structure, which allows attackers to execute arbitrary code via a crafted app.... Read more
- EPSS Score: %0.64
- Published: Oct. 23, 2015
- Modified: Apr. 12, 2025
-
6.8
MEDIUMCVE-2015-7002
WebKit, as used in Apple iOS before 9.1, Safari before 9.0.1, and iTunes before 12.3.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerabil... Read more
- EPSS Score: %1.01
- Published: Oct. 23, 2015
- Modified: Apr. 12, 2025
-
6.8
MEDIUMCVE-2015-6996
IOAcceleratorFamily in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted app.... Read more
- EPSS Score: %6.12
- Published: Oct. 23, 2015
- Modified: Apr. 12, 2025
-
6.8
MEDIUMCVE-2015-6995
The Disk Images component in Apple iOS before 9.1 and OS X before 10.11.1 misparses images, which allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted app.... Read more
- EPSS Score: %10.59
- Published: Oct. 23, 2015
- Modified: Apr. 12, 2025
-
7.1
HIGHCVE-2015-6994
The kernel in Apple iOS before 9.1 and OS X before 10.11.1 mishandles reuse of virtual memory, which allows attackers to cause a denial of service via a crafted app.... Read more
- EPSS Score: %1.60
- Published: Oct. 23, 2015
- Modified: Apr. 12, 2025
-
6.8
MEDIUMCVE-2015-6993
FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6976, CVE-2015-6977, CVE-2015-69... Read more
- EPSS Score: %1.87
- Published: Oct. 23, 2015
- Modified: Apr. 12, 2025
-
6.8
MEDIUMCVE-2015-6991
FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6976, CVE-2015-6977, CVE-2015-69... Read more
- EPSS Score: %1.87
- Published: Oct. 23, 2015
- Modified: Apr. 12, 2025
-
6.8
MEDIUMCVE-2015-6990
FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6976, CVE-2015-6977, CVE-2015-69... Read more
- EPSS Score: %1.87
- Published: Oct. 23, 2015
- Modified: Apr. 12, 2025
-
6.8
MEDIUMCVE-2015-6989
Grand Central Dispatch in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted package that is mishandled during dispatch calls.... Read more
- EPSS Score: %1.00
- Published: Oct. 23, 2015
- Modified: Apr. 12, 2025
-
10.0
HIGHCVE-2015-6988
The kernel in Apple iOS before 9.1 and OS X before 10.11.1 does not initialize an unspecified data structure, which allows remote attackers to execute arbitrary code via vectors involving an unknown network-connectivity requirement.... Read more
- EPSS Score: %11.01
- Published: Oct. 23, 2015
- Modified: Apr. 12, 2025
-
2.1
LOWCVE-2015-6987
The File Bookmark component in Apple OS X before 10.11.1 allows local users to cause a denial of service (application crash) via crafted bookmark metadata in a folder.... Read more
- EPSS Score: %0.04
- Published: Oct. 23, 2015
- Modified: Apr. 12, 2025
-
6.8
MEDIUMCVE-2015-6985
Apple Type Services (ATS) in Apple OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web page.... Read more
- EPSS Score: %1.10
- Published: Oct. 23, 2015
- Modified: Apr. 12, 2025
-
8.8
HIGHCVE-2015-6984
libarchive in Apple OS X before 10.11.1 allows attackers to write to arbitrary files via a crafted app that conducts an unspecified symlink attack.... Read more
- EPSS Score: %0.35
- Published: Oct. 23, 2015
- Modified: Apr. 12, 2025