Apple

tvOS

2157 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.3

CVE-2015-7055

  • EPSS 2.4%
  • Veröffentlicht 11.12.2015 11:59:21
  • Zuletzt bearbeitet 06.05.2026 22:30:45

AppleMobileFileIntegrity in Apple iOS before 9.2 and tvOS before 9.1 does not prevent changes to access-control structures, which allows attackers to execute arbitrary code in a privileged context via a crafted app.

6.8

CVE-2015-7054

  • EPSS 2.81%
  • Veröffentlicht 11.12.2015 11:59:20
  • Zuletzt bearbeitet 06.05.2026 22:30:45

zlib in the Compression component in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 does not initialize memory for an unspecified data structure, which allows remote attackers to execute arbitrary code via a crafte...

6.8

CVE-2015-7053

  • EPSS 3.82%
  • Veröffentlicht 11.12.2015 11:59:19
  • Zuletzt bearbeitet 06.05.2026 22:30:45

ImageIO in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted image.

9.3

CVE-2015-7051

  • EPSS 2.53%
  • Veröffentlicht 11.12.2015 11:59:17
  • Zuletzt bearbeitet 06.05.2026 22:30:45

MobileStorageMounter in Apple iOS before 9.2 and tvOS before 9.1 mishandles the timing of trust-cache loading, which allows attackers to execute arbitrary code in a privileged context via a crafted app.

6.8

CVE-2015-7048

  • EPSS 2.8%
  • Veröffentlicht 11.12.2015 11:59:13
  • Zuletzt bearbeitet 06.05.2026 22:30:45

WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than C...

7.2

CVE-2015-7047

  • EPSS 1%
  • Veröffentlicht 11.12.2015 11:59:12
  • Zuletzt bearbeitet 06.05.2026 22:30:45

The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to gain privileges via a crafted mach message that is misparsed.

2.6

CVE-2015-7046

  • EPSS 1.9%
  • Veröffentlicht 11.12.2015 11:59:11
  • Zuletzt bearbeitet 06.05.2026 22:30:45

The Sandbox feature in xnu in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 does not properly implement privilege separation, which allows attackers to bypass the ASLR protection mechanism via a crafted app with r...

5

CVE-2015-7045

  • EPSS 1.46%
  • Veröffentlicht 11.12.2015 11:59:10
  • Zuletzt bearbeitet 06.05.2026 22:30:45

Keychain Access in Apple OS X before 10.11.2 and tvOS before 9.1 improperly interacts with Keychain Agent, which allows attackers to spoof the Keychain Server via unspecified vectors.

4.3

CVE-2015-7043

  • EPSS 2.05%
  • Veröffentlicht 11.12.2015 11:59:08
  • Zuletzt bearbeitet 06.05.2026 22:30:45

The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to cause a denial of service via a crafted app, a different vulnerability than CVE-2015-7040, CVE-2015-7041, and CVE-2015-7042.

4.3

CVE-2015-7042

  • EPSS 2.05%
  • Veröffentlicht 11.12.2015 11:59:07
  • Zuletzt bearbeitet 06.05.2026 22:30:45

The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to cause a denial of service via a crafted app, a different vulnerability than CVE-2015-7040, CVE-2015-7041, and CVE-2015-7043.