VYPR

Iphone OS

by Apple Inc.

CVEs (2,060)

  • CVE-2015-7042Dec 11, 2015
    Apple Inc.
    tvOS
    risk 0.00cvss —epss 0.02

    The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to cause a denial of service via a crafted app, a different vulnerability than CVE-2015-7040, CVE-2015-7041, and CVE-2015-7043.

  • CVE-2015-7041Dec 11, 2015
    Apple Inc.
    tvOS
    risk 0.00cvss —epss 0.02

    The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to cause a denial of service via a crafted app, a different vulnerability than CVE-2015-7040, CVE-2015-7042, and CVE-2015-7043.

  • CVE-2015-7040Dec 11, 2015
    Apple Inc.
    tvOS
    risk 0.00cvss —epss 0.02

    The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to cause a denial of service via a crafted app, a different vulnerability than CVE-2015-7041, CVE-2015-7042, and CVE-2015-7043.

  • CVE-2015-7038Dec 11, 2015
    Apple Inc.
    tvOS
    risk 0.00cvss —epss 0.04

    Buffer overflow in libc in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code via a crafted package, a different vulnerability than CVE-2015-7039.

  • CVE-2015-7037Dec 11, 2015
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.02

    Directory traversal vulnerability in Mobile Backup in Photos in Apple iOS before 9.2 allows attackers to read arbitrary files via a crafted pathname.

  • CVE-2015-7001Dec 11, 2015
    Apple Inc.
    tvOS
    risk 0.00cvss —epss 0.02

    AppSandbox in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 mishandles hard links, which allows attackers to bypass Contacts access revocation via a crafted app.

  • CVE-2015-5859Nov 22, 2015
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.01

    The CFNetwork HTTPProtocol component in Apple iOS before 9 and OS X before 10.11 does not properly recognize the HSTS preload list during a Safari private-browsing session, which makes it easier for remote attackers to obtain sensitive information by sniffing the network.

  • CVE-2015-5787Nov 22, 2015
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.01

    The kernel in Apple iOS before 8.4.1 does not properly restrict debugging features, which allows attackers to bypass background-execution limitations via a crafted app.

  • CVE-2015-8035Nov 18, 2015
    Xmlsoft
    Libxml2
    risk 0.00cvss —epss 0.03

    The xz_decomp function in xzlib.c in libxml2 2.9.1 does not properly detect compression errors, which allows context-dependent attackers to cause a denial of service (process hang) via crafted XML data.

  • CVE-2015-7942Nov 18, 2015
    Xmlsoft
    Libxml2
    risk 0.00cvss —epss 0.05

    The xmlParseConditionalSections function in parser.c in libxml2 does not properly skip intermediary entities when it stops parsing invalid input, which allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via crafted XML data, a…

  • CVE-2015-7995Nov 17, 2015
    Libxslt
    libxslt
    risk 0.00cvss —epss 0.04

    The xsltStylePreCompute function in preproc.c in libxslt 1.1.28 does not check if the parent node is an element, which allows attackers to cause a denial of service via a crafted XML file, related to a "type confusion" issue.

  • CVE-2015-7023Oct 23, 2015
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.02

    CFNetwork in Apple iOS before 9.1 and OS X before 10.11.1 does not properly consider the uppercase-versus-lowercase distinction during cookie parsing, which allows remote web servers to overwrite cookies via unspecified vectors.

  • CVE-2015-7018Oct 23, 2015
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.03

    FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6976, CVE-2015-6977, CVE-2015-6978, CVE-2015-6990,…

  • CVE-2015-7015Oct 23, 2015
    Apple Inc.
    watchOS
    risk 0.00cvss —epss 0.03

    Heap-based buffer overflow in the DNS client library in configd in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows attackers to execute arbitrary code via a crafted app that sends a spoofed configd response to a client.

  • CVE-2015-7014Oct 23, 2015
    Apple Inc.
    Safari
    risk 0.00cvss —epss 0.03

    WebKit, as used in Apple iOS before 9.1, Safari before 9.0.1, and iTunes before 12.3.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit…

  • CVE-2015-7013Oct 23, 2015
    Apple Inc.
    iTunes
    risk 0.00cvss —epss 0.02

    WebKit, as used in Apple Safari before 9.0.1 and iTunes before 12.3.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in…

  • CVE-2015-7012Oct 23, 2015
    Apple Inc.
    Safari
    risk 0.00cvss —epss 0.02

    WebKit, as used in Apple iOS before 9.1, Safari before 9.0.1, and iTunes before 12.3.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit…

  • CVE-2015-7010Oct 23, 2015
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.03

    FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6976, CVE-2015-6977, CVE-2015-6978, CVE-2015-6990,…

  • CVE-2015-7009Oct 23, 2015
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.03

    FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6976, CVE-2015-6977, CVE-2015-6978, CVE-2015-6990,…

  • CVE-2015-7008Oct 23, 2015
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.03

    FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6976, CVE-2015-6977, CVE-2015-6978, CVE-2015-6990,…

Page 62 of 103