Unrated severityNVD Advisory· Published Aug 16, 2015· Updated Jun 17, 2026

CVE-2015-3784

Description

Office Viewer in Apple iOS before 8.4.1 and OS X before 10.10.5 allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Apple Inc./Iwork
cpe:2.3:a:apple:iwork:*:*:*:*:*:*:*:*
Range: <=2.5.4
Apple Inc./Keynote
cpe:2.3:a:apple:keynote:*:*:*:*:*:*:*:*
Range: <=6.5
Apple Inc./Numbers
cpe:2.3:a:apple:numbers:*:*:*:*:*:*:*:*
Range: <=3.5
Apple Inc./Pages
cpe:2.3:a:apple:pages:*:*:*:*:*:*:*:*
Range: <=5.5.3
Apple Inc./Iphone OS
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
Range: <=8.4
Apple Inc./Mac OS X
cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
Range: <=10.10.4
Apple Inc./Office Viewerllm-create
Range: iOS <8.4.1; OS X <10.10.5

Patches

Vulnerability mechanics

References

lists.apple.com/archives/security-announce/2015/Aug/msg00001.htmlnvdVendor Advisory
lists.apple.com/archives/security-announce/2015/Aug/msg00002.htmlnvdVendor Advisory
lists.apple.com/archives/security-announce/2015/Oct/msg00000.htmlnvdVendor Advisory
support.apple.com/HT205373nvdVendor Advisory
support.apple.com/kb/HT205030nvdVendor Advisory
support.apple.com/kb/HT205031nvdVendor Advisory
www.securityfocus.com/bid/76343nvd
www.securitytracker.com/id/1033275nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000