- EPSS 2.95%
- Veröffentlicht 15.12.2015 21:59:03
- Zuletzt bearbeitet 12.04.2025 10:46:40
Heap-based buffer overflow in the xmlGROW function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to obtain sensitive process memory information via unspecified vectors.
CVE-2015-5312
- EPSS 1.99%
- Veröffentlicht 15.12.2015 21:59:00
- Zuletzt bearbeitet 12.04.2025 10:46:40
The xmlStringLenDecodeEntities function in parser.c in libxml2 before 2.9.3 does not properly prevent entity expansion, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted XML data, a different vulnerab...
- EPSS 0.87%
- Veröffentlicht 11.12.2015 12:00:10
- Zuletzt bearbeitet 12.04.2025 10:46:40
The LaunchServices component in Apple iOS before 9.2 and watchOS before 2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a malformed plist.
CVE-2015-7112
- EPSS 19.67%
- Veröffentlicht 11.12.2015 12:00:09
- Zuletzt bearbeitet 12.04.2025 10:46:40
The IOHIDFamily API in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a differe...
CVE-2015-7111
- EPSS 1.73%
- Veröffentlicht 11.12.2015 12:00:08
- Zuletzt bearbeitet 12.04.2025 10:46:40
The IOHIDFamily API in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a differe...
CVE-2015-7105
- EPSS 2.53%
- Veröffentlicht 11.12.2015 12:00:02
- Zuletzt bearbeitet 12.04.2025 10:46:40
CoreGraphics in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file.
CVE-2015-7084
- EPSS 0.34%
- Veröffentlicht 11.12.2015 11:59:49
- Zuletzt bearbeitet 12.04.2025 10:46:40
The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7...
CVE-2015-7083
- EPSS 0.28%
- Veröffentlicht 11.12.2015 11:59:48
- Zuletzt bearbeitet 12.04.2025 10:46:40
The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7...
CVE-2015-7075
- EPSS 3.4%
- Veröffentlicht 11.12.2015 11:59:40
- Zuletzt bearbeitet 12.04.2025 10:46:40
CoreMedia Playback in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a malformed media file.
CVE-2015-7073
- EPSS 3.4%
- Veröffentlicht 11.12.2015 11:59:39
- Zuletzt bearbeitet 12.04.2025 10:46:40
Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted SSL handshake.