CVE-2015-5748
- EPSS 0.08%
- Veröffentlicht 17.08.2015 00:00:27
- Zuletzt bearbeitet 12.04.2025 10:46:40
The kernel in Apple OS X before 10.10.5 does not properly mount HFS volumes, which allows local users to cause a denial of service via a crafted volume.
- EPSS 0.23%
- Veröffentlicht 17.08.2015 00:00:24
- Zuletzt bearbeitet 12.04.2025 10:46:40
AppleFileConduit in Apple iOS before 8.4.1 allows attackers to bypass intended restrictions on filesystem access via an afc command that leverages symlink mishandling.
CVE-2015-3807
- EPSS 2.37%
- Veröffentlicht 17.08.2015 00:00:22
- Zuletzt bearbeitet 12.04.2025 10:46:40
libxml2 in Apple iOS before 8.4.1 and OS X before 10.10.5 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (memory corruption) via a crafted XML document.
CVE-2015-3806
- EPSS 0.05%
- Veröffentlicht 17.08.2015 00:00:21
- Zuletzt bearbeitet 12.04.2025 10:46:40
Apple iOS before 8.4.1 and OS X before 10.10.5 allow local users to bypass a code-signing protection mechanism by appending code to a crafted executable file.
CVE-2015-3805
- EPSS 0.06%
- Veröffentlicht 17.08.2015 00:00:19
- Zuletzt bearbeitet 12.04.2025 10:46:40
Apple iOS before 8.4.1 and OS X before 10.10.5 allow local users to bypass a code-signing protection mechanism via a crafted Mach-O file, a different vulnerability than CVE-2015-3802.
CVE-2015-3804
- EPSS 1.99%
- Veröffentlicht 17.08.2015 00:00:18
- Zuletzt bearbeitet 12.04.2025 10:46:40
FontParser in Apple iOS before 8.4.1 and OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted font file, a different vulnerability than CVE-2015-575...
CVE-2015-3803
- EPSS 0.06%
- Veröffentlicht 17.08.2015 00:00:17
- Zuletzt bearbeitet 12.04.2025 10:46:40
Apple iOS before 8.4.1 and OS X before 10.10.5 allow local users to bypass a code-signing protection mechanism via a crafted multi-architecture executable file.
CVE-2015-3802
- EPSS 0.06%
- Veröffentlicht 17.08.2015 00:00:16
- Zuletzt bearbeitet 12.04.2025 10:46:40
Apple iOS before 8.4.1 and OS X before 10.10.5 allow local users to bypass a code-signing protection mechanism via a crafted Mach-O file, a different vulnerability than CVE-2015-3805.
CVE-2015-3800
- EPSS 0.07%
- Veröffentlicht 17.08.2015 00:00:15
- Zuletzt bearbeitet 12.04.2025 10:46:40
The DiskImages component in Apple iOS before 8.4.1 and OS X before 10.10.5 allows local users to gain privileges or cause a denial of service (memory corruption and application crash) via a malformed DMG image.
CVE-2015-3798
- EPSS 20.63%
- Veröffentlicht 17.08.2015 00:00:13
- Zuletzt bearbeitet 12.04.2025 10:46:40
The TRE library in Libc in Apple iOS before 8.4.1 and OS X before 10.10.5 allows context-dependent attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted regular expression, a differen...