VYPR
← Apple Inc.

Vendor CVEs

Apple Inc.

All CVEs

8,451 total · sorted by risk
  • CVE-2015-7073Dec 11, 2015
    Apple Inc.
    tvOS
    risk 0.00cvss —epss 0.04

    Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted SSL handshake.

  • CVE-2015-7072Dec 11, 2015
    Apple Inc.
    tvOS
    risk 0.00cvss —epss 0.03

    dyld in Apple iOS before 9.2, tvOS before 9.1, and watchOS before 2.1 mishandles segment validation, which allows attackers to execute arbitrary code in a privileged context via a crafted app.

  • CVE-2015-7071Dec 11, 2015
    Apple Inc.
    OS X
    risk 0.00cvss —epss 0.02

    The File Bookmark component in Apple OS X before 10.11.2 allows attackers to bypass a sandbox protection mechanism for app scoped bookmarks via a crafted pathname.

  • CVE-2015-7070Dec 11, 2015
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.02

    Mobile Replayer in GPUTools Framework in Apple iOS before 9.2 allows attackers to execute arbitrary code in a privileged context via an app that provides a crafted pathname, a different vulnerability than CVE-2015-7069.

  • CVE-2015-7069Dec 11, 2015
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.02

    Mobile Replayer in GPUTools Framework in Apple iOS before 9.2 allows attackers to execute arbitrary code in a privileged context via an app that provides a crafted pathname, a different vulnerability than CVE-2015-7070.

  • CVE-2015-7067Dec 11, 2015
    Apple Inc.
    OS X
    risk 0.00cvss —epss 0.00

    IOThunderboltFamily in Apple OS X before 10.11.2 allows local users to cause a denial of service (NULL pointer dereference) via an unspecified userclient type.

  • CVE-2015-7066Dec 11, 2015
    Apple Inc.
    tvOS
    risk 0.00cvss —epss 0.03

    OpenGL in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2015-7064.

  • CVE-2015-7065Dec 11, 2015
    Apple Inc.
    tvOS
    risk 0.00cvss —epss 0.02

    OpenGL in Apple iOS before 9.2, OS X before 10.11.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.

  • CVE-2015-7064Dec 11, 2015
    Apple Inc.
    tvOS
    risk 0.00cvss —epss 0.03

    OpenGL in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2015-7066.

  • CVE-2015-7063Dec 11, 2015
    Apple Inc.
    OS X
    risk 0.00cvss —epss 0.00

    The kernel loader in EFI in Apple OS X before 10.11.2 allows local users to gain privileges via a crafted pathname.

  • CVE-2015-7062Dec 11, 2015
    Apple Inc.
    tvOS
    risk 0.00cvss —epss 0.00

    Apple OS X before 10.11.2 and tvOS before 9.1 allow local users to bypass intended configuration-profile installation restrictions via unspecified vectors.

  • CVE-2015-7061Dec 11, 2015
    Apple Inc.
    tvOS
    risk 0.00cvss —epss 0.02

    The ASN.1 decoder in Apple OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted certificate, a different vulnerability than CVE-2015-7059 and CVE-2015-7060.

  • CVE-2015-7060Dec 11, 2015
    Apple Inc.
    tvOS
    risk 0.00cvss —epss 0.02

    The ASN.1 decoder in Apple OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted certificate, a different vulnerability than CVE-2015-7059 and CVE-2015-7061.

  • CVE-2015-7059Dec 11, 2015
    Apple Inc.
    tvOS
    risk 0.00cvss —epss 0.02

    The ASN.1 decoder in Apple OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted certificate, a different vulnerability than CVE-2015-7060 and CVE-2015-7061.

  • CVE-2015-7058Dec 11, 2015
    Apple Inc.
    tvOS
    risk 0.00cvss —epss 0.01

    Apple iOS before 9.2, OS X before 10.11.2, and tvOS before 9.1 improperly validate keychain item ACLs, which allows attackers to obtain access to keychain items via a crafted app.

  • CVE-2015-7057Dec 11, 2015
    Apple Inc.
    Xcode
    risk 0.00cvss —epss 0.00

    otools in Apple Xcode before 7.2 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted mach-o file, a different vulnerability than CVE-2015-7049.

  • CVE-2015-7056Dec 11, 2015
    Apple Inc.
    Xcode
    risk 0.00cvss —epss 0.01

    IDE SCM in Apple Xcode before 7.2 does not recognize .gitignore files, which allows remote attackers to obtain sensitive information in opportunistic circumstances by leveraging the presence of a file matching an ignore pattern.

  • CVE-2015-7055Dec 11, 2015
    Apple Inc.
    tvOS
    risk 0.00cvss —epss 0.02

    AppleMobileFileIntegrity in Apple iOS before 9.2 and tvOS before 9.1 does not prevent changes to access-control structures, which allows attackers to execute arbitrary code in a privileged context via a crafted app.

  • CVE-2015-7054Dec 11, 2015
    Apple Inc.
    tvOS
    risk 0.00cvss —epss 0.03

    zlib in the Compression component in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 does not initialize memory for an unspecified data structure, which allows remote attackers to execute arbitrary code via a crafted web site.

  • CVE-2015-7053Dec 11, 2015
    Apple Inc.
    tvOS
    risk 0.00cvss —epss 0.04

    ImageIO in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted image.

  • CVE-2015-7052Dec 11, 2015
    Apple Inc.
    OS X
    risk 0.00cvss —epss 0.00

    kext tools in Apple OS X before 10.11.2 mishandles kernel-extension loading, which allows local users to gain privileges via unspecified vectors.

  • CVE-2015-7051Dec 11, 2015
    Apple Inc.
    tvOS
    risk 0.00cvss —epss 0.03

    MobileStorageMounter in Apple iOS before 9.2 and tvOS before 9.1 mishandles the timing of trust-cache loading, which allows attackers to execute arbitrary code in a privileged context via a crafted app.

  • CVE-2015-7050Dec 11, 2015
    Apple Inc.
    Safari
    risk 0.00cvss —epss 0.02

    WebKit in Apple iOS before 9.2 and Safari before 9.0.2 misparses content extensions, which allows remote attackers to obtain sensitive browsing-history information via a crafted web site.

  • CVE-2015-7049Dec 11, 2015
    Apple Inc.
    Xcode
    risk 0.00cvss —epss 0.00

    otools in Apple Xcode before 7.2 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted mach-o file, a different vulnerability than CVE-2015-7057.

  • CVE-2015-7048Dec 11, 2015
    Apple Inc.
    Safari
    risk 0.00cvss —epss 0.03

    WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2015-7095, CVE-2015-7096,…

  • CVE-2015-7046Dec 11, 2015
    Apple Inc.
    tvOS
    risk 0.00cvss —epss 0.02

    The Sandbox feature in xnu in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 does not properly implement privilege separation, which allows attackers to bypass the ASLR protection mechanism via a crafted app with root privileges.

  • CVE-2015-7045Dec 11, 2015
    Apple Inc.
    tvOS
    risk 0.00cvss —epss 0.01

    Keychain Access in Apple OS X before 10.11.2 and tvOS before 9.1 improperly interacts with Keychain Agent, which allows attackers to spoof the Keychain Server via unspecified vectors.

  • CVE-2015-7044Dec 11, 2015
    Apple Inc.
    OS X
    risk 0.00cvss —epss 0.02

    The System Integrity Protection feature in Apple OS X before 10.11.2 mishandles union mounts, which allows attackers to execute arbitrary code in a privileged context via a crafted app with root privileges.

  • CVE-2015-7043Dec 11, 2015
    Apple Inc.
    tvOS
    risk 0.00cvss —epss 0.02

    The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to cause a denial of service via a crafted app, a different vulnerability than CVE-2015-7040, CVE-2015-7041, and CVE-2015-7042.

  • CVE-2015-7042Dec 11, 2015
    Apple Inc.
    tvOS
    risk 0.00cvss —epss 0.02

    The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to cause a denial of service via a crafted app, a different vulnerability than CVE-2015-7040, CVE-2015-7041, and CVE-2015-7043.

  • CVE-2015-7041Dec 11, 2015
    Apple Inc.
    tvOS
    risk 0.00cvss —epss 0.02

    The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to cause a denial of service via a crafted app, a different vulnerability than CVE-2015-7040, CVE-2015-7042, and CVE-2015-7043.

  • CVE-2015-7040Dec 11, 2015
    Apple Inc.
    tvOS
    risk 0.00cvss —epss 0.02

    The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to cause a denial of service via a crafted app, a different vulnerability than CVE-2015-7041, CVE-2015-7042, and CVE-2015-7043.

  • CVE-2015-7038Dec 11, 2015
    Apple Inc.
    tvOS
    risk 0.00cvss —epss 0.04

    Buffer overflow in libc in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code via a crafted package, a different vulnerability than CVE-2015-7039.

  • CVE-2015-7037Dec 11, 2015
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.02

    Directory traversal vulnerability in Mobile Backup in Photos in Apple iOS before 9.2 allows attackers to read arbitrary files via a crafted pathname.

  • CVE-2015-7001Dec 11, 2015
    Apple Inc.
    tvOS
    risk 0.00cvss —epss 0.02

    AppSandbox in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 mishandles hard links, which allows attackers to bypass Contacts access revocation via a crafted app.

  • CVE-2015-5859Nov 22, 2015
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.01

    The CFNetwork HTTPProtocol component in Apple iOS before 9 and OS X before 10.11 does not properly recognize the HSTS preload list during a Safari private-browsing session, which makes it easier for remote attackers to obtain sensitive information by sniffing the network.

  • CVE-2015-5787Nov 22, 2015
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.01

    The kernel in Apple iOS before 8.4.1 does not properly restrict debugging features, which allows attackers to bypass background-execution limitations via a crafted app.

  • CVE-2015-8035Nov 18, 2015
    Xmlsoft
    Libxml2
    risk 0.00cvss —epss 0.03

    The xz_decomp function in xzlib.c in libxml2 2.9.1 does not properly detect compression errors, which allows context-dependent attackers to cause a denial of service (process hang) via crafted XML data.

  • CVE-2015-7942Nov 18, 2015
    Xmlsoft
    Libxml2
    risk 0.00cvss —epss 0.05

    The xmlParseConditionalSections function in parser.c in libxml2 does not properly skip intermediary entities when it stops parsing invalid input, which allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via crafted XML data, a…

  • CVE-2015-7995Nov 17, 2015
    Libxslt
    libxslt
    risk 0.00cvss —epss 0.04

    The xsltStylePreCompute function in preproc.c in libxslt 1.1.28 does not check if the parent node is an element, which allows attackers to cause a denial of service via a crafted XML file, related to a "type confusion" issue.

  • CVE-2013-5229Nov 14, 2015
    Apple Inc.
    Remote Desktop
    risk 0.00cvss —epss 0.00

    The Remote Desktop full-screen feature in Apple OS X before 10.9 and Apple Remote Desktop before 3.7 sends dialog-box text to a connected remote host upon being woken from sleep, which allows physically proximate attackers to bypass intended access restrictions by entering a…

  • CVE-2015-7023Oct 23, 2015
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.02

    CFNetwork in Apple iOS before 9.1 and OS X before 10.11.1 does not properly consider the uppercase-versus-lowercase distinction during cookie parsing, which allows remote web servers to overwrite cookies via unspecified vectors.

  • CVE-2015-7021Oct 23, 2015
    Apple Inc.
    OS X
    risk 0.00cvss —epss 0.00

    The Graphics Drivers subsystem in Apple OS X before 10.11.1 allows local users to gain privileges or cause a denial of service (kernel memory corruption) via unspecified vectors.

  • CVE-2015-7020Oct 23, 2015
    Apple Inc.
    OS X
    risk 0.00cvss —epss 0.00

    The NVIDIA driver in the Graphics Drivers subsystem in Apple OS X before 10.11.1 allows local users to obtain sensitive information from kernel memory or cause a denial of service (out-of-bounds read and system crash) via unspecified vectors, a different vulnerability than…

  • CVE-2015-7019Oct 23, 2015
    Apple Inc.
    OS X
    risk 0.00cvss —epss 0.00

    The NVIDIA driver in the Graphics Drivers subsystem in Apple OS X before 10.11.1 allows local users to obtain sensitive information from kernel memory or cause a denial of service (out-of-bounds read and system crash) via unspecified vectors, a different vulnerability than…

  • CVE-2015-7018Oct 23, 2015
    Apple Inc.
    iOS
    risk 0.00cvss —epss 0.03

    FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6976, CVE-2015-6977, CVE-2015-6978, CVE-2015-6990,…

  • CVE-2015-7016Oct 23, 2015
    Apple Inc.
    OS X
    risk 0.00cvss —epss 0.01

    The MCX Application Restrictions component in Apple OS X before 10.11.1, when Managed Configuration is enabled, mishandles provisioning profiles, which allows attackers to bypass intended entitlement restrictions and gain privileges via a crafted developer-signed app.

  • CVE-2015-7015Oct 23, 2015
    Apple Inc.
    watchOS
    risk 0.00cvss —epss 0.03

    Heap-based buffer overflow in the DNS client library in configd in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows attackers to execute arbitrary code via a crafted app that sends a spoofed configd response to a client.

  • CVE-2015-7014Oct 23, 2015
    Apple Inc.
    Safari
    risk 0.00cvss —epss 0.03

    WebKit, as used in Apple iOS before 9.1, Safari before 9.0.1, and iTunes before 12.3.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit…

  • CVE-2015-7013Oct 23, 2015
    Apple Inc.
    iTunes
    risk 0.00cvss —epss 0.02

    WebKit, as used in Apple Safari before 9.0.1 and iTunes before 12.3.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in…

Page 115 of 170