CVE-2015-7054
- EPSS 1.14%
- Veröffentlicht 11.12.2015 11:59:20
- Zuletzt bearbeitet 12.04.2025 10:46:40
zlib in the Compression component in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 does not initialize memory for an unspecified data structure, which allows remote attackers to execute arbitrary code via a crafte...
CVE-2015-7053
- EPSS 3.4%
- Veröffentlicht 11.12.2015 11:59:19
- Zuletzt bearbeitet 12.04.2025 10:46:40
ImageIO in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted image.
CVE-2015-7051
- EPSS 0.76%
- Veröffentlicht 11.12.2015 11:59:17
- Zuletzt bearbeitet 12.04.2025 10:46:40
MobileStorageMounter in Apple iOS before 9.2 and tvOS before 9.1 mishandles the timing of trust-cache loading, which allows attackers to execute arbitrary code in a privileged context via a crafted app.
CVE-2015-7048
- EPSS 1.01%
- Veröffentlicht 11.12.2015 11:59:13
- Zuletzt bearbeitet 12.04.2025 10:46:40
WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than C...
CVE-2015-7047
- EPSS 0.75%
- Veröffentlicht 11.12.2015 11:59:12
- Zuletzt bearbeitet 12.04.2025 10:46:40
The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to gain privileges via a crafted mach message that is misparsed.
CVE-2015-7046
- EPSS 0.74%
- Veröffentlicht 11.12.2015 11:59:11
- Zuletzt bearbeitet 12.04.2025 10:46:40
The Sandbox feature in xnu in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 does not properly implement privilege separation, which allows attackers to bypass the ASLR protection mechanism via a crafted app with r...
- EPSS 0.34%
- Veröffentlicht 11.12.2015 11:59:10
- Zuletzt bearbeitet 12.04.2025 10:46:40
Keychain Access in Apple OS X before 10.11.2 and tvOS before 9.1 improperly interacts with Keychain Agent, which allows attackers to spoof the Keychain Server via unspecified vectors.
CVE-2015-7043
- EPSS 1.08%
- Veröffentlicht 11.12.2015 11:59:08
- Zuletzt bearbeitet 12.04.2025 10:46:40
The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to cause a denial of service via a crafted app, a different vulnerability than CVE-2015-7040, CVE-2015-7041, and CVE-2015-7042.
CVE-2015-7042
- EPSS 1.08%
- Veröffentlicht 11.12.2015 11:59:07
- Zuletzt bearbeitet 12.04.2025 10:46:40
The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to cause a denial of service via a crafted app, a different vulnerability than CVE-2015-7040, CVE-2015-7041, and CVE-2015-7043.
CVE-2015-7041
- EPSS 1.08%
- Veröffentlicht 11.12.2015 11:59:06
- Zuletzt bearbeitet 12.04.2025 10:46:40
The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to cause a denial of service via a crafted app, a different vulnerability than CVE-2015-7040, CVE-2015-7042, and CVE-2015-7043.