Vendor CVEs

Apple Inc.

All CVEs

9,002 total · sorted by risk

CVE	Vendor / Product	Sev	CVSS	EPSS	Published	Description
CVE-2022-0319	Vim Vim	Med	5.5	0.01	Jan 21, 2022	Out-of-bounds Read in vim/vim prior to 8.2.
CVE-2022-0318	Vim Vim	Cri	9.8	0.02	Jan 21, 2022	Heap-based Buffer Overflow in vim/vim prior to 8.2.
CVE-2022-21658	Apple Inc. macOS	Hig	7.3	0.01	Jan 20, 2022	Rust is a multi-paradigm, general-purpose programming language designed for performance and safety, especially safe concurrency. The Rust Security Response WG was notified that the `std::fs::remove_dir_all` standard library function is vulnerable a race condition enabling…
CVE-2022-0261	Vim Vim	Hig	7.8	0.02	Jan 18, 2022	Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
CVE-2022-0158	Vim Vim	Low	3.3	0.02	Jan 10, 2022	vim is vulnerable to Heap-based Buffer Overflow
CVE-2022-0156	Vim Vim	Med	5.5	0.02	Jan 10, 2022	vim is vulnerable to Use After Free
CVE-2022-0128	Vim Vim	Hig	7.8	0.02	Jan 6, 2022	vim is vulnerable to Out-of-bounds Read
CVE-2021-4193	Vim Vim	Med	5.5	0.02	Dec 31, 2021	vim is vulnerable to Out-of-bounds Read
CVE-2021-4192	Vim Vim	Hig	7.8	0.02	Dec 31, 2021	vim is vulnerable to Use After Free
CVE-2021-4187	Vim Vim	Hig	7.8	0.02	Dec 29, 2021	vim is vulnerable to Use After Free
CVE-2021-4173	Vim Vim	Hig	7.8	0.02	Dec 27, 2021	vim is vulnerable to Use After Free
CVE-2021-4166	Vim Vim	Hig	7.1	0.02	Dec 25, 2021	vim is vulnerable to Out-of-bounds Read
CVE-2021-4136	Vim Vim	Hig	7.8	0.02	Dec 19, 2021	vim is vulnerable to Heap-based Buffer Overflow
CVE-2020-8037	Tcpdump Tcpdump	Hig	7.5	0.03	Nov 4, 2020	The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory.
CVE-2019-14868	Ksh ksh	Hig	7.4	0.01	Apr 2, 2020	In ksh version 20120801, a flaw was found in the way it evaluates certain environment variables. An attacker could use this flaw to override or bypass environment restrictions to execute shell commands. Services and applications that allow remote unauthenticated attackers to…
CVE-2019-15165	Libpcap libpcap	Med	5.3	0.03	Oct 3, 2019	sf-pcapng.c in libpcap before 1.9.1 does not properly validate the PHB header length before allocating memory.
CVE-2019-15166	Tcpdump Tcpdump	Low	1.6	0.05	Oct 3, 2019	lmp_print_data_link_subobjs() in print-lmp.c in tcpdump before 4.9.3 lacks certain bounds checks.
CVE-2018-16451	Tcpdump Tcpdump	Hig	7.5	0.04	Oct 3, 2019	The SMB parser in tcpdump before 4.9.3 has buffer over-reads in print-smb.c:print_trans() for \MAILSLOT\BROWSE and \PIPE\LANMAN.
CVE-2018-16230	Tcpdump Tcpdump	Hig	7.5	0.04	Oct 3, 2019	The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_attr_print() (MP_REACH_NLRI).
CVE-2018-16228	Tcpdump Tcpdump	Hig	7.5	0.04	Oct 3, 2019	The HNCP parser in tcpdump before 4.9.3 has a buffer over-read in print-hncp.c:print_prefix().
CVE-2019-8906	File Project File	Med	4.4	0.00	Feb 18, 2019	do_core_note in readelf.c in libmagic.a in file 5.35 has an out-of-bounds read because memcpy is misused.
CVE-2017-18248	Apple Inc. Cups	Med	5.3	0.02	Mar 26, 2018	The add_job function in scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is enabled, can be crashed by remote attackers by sending print jobs with an invalid username, related to a D-Bus notification.
CVE-2017-18190	Apple Inc. Cups	Hig	7.5	0.03	Feb 16, 2018	A localhost.localdomain whitelist entry in valid_host() in scheduler/client.c in CUPS before 2.2.2 allows remote attackers to execute arbitrary IPP commands by sending POST requests to the CUPS daemon in conjunction with DNS rebinding. The localhost.localdomain name is often…
CVE-2015-8242	Xmlsoft Libxml2		—	0.04	Dec 15, 2015	The xmlSAX2TextNode function in SAX2.c in the push interface in the HTML parser in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service (stack-based buffer over-read and application crash) or obtain sensitive information via crafted XML data.
CVE-2015-7500	Xmlsoft Libxml2		—	0.06	Dec 15, 2015	The xmlParseMisc function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service (out-of-bounds heap read) via unspecified vectors related to incorrect entities boundaries and start tags.
CVE-2015-5312	Xmlsoft Libxml2		—	0.04	Dec 15, 2015	The xmlStringLenDecodeEntities function in parser.c in libxml2 before 2.9.3 does not properly prevent entity expansion, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted XML data, a different vulnerability than CVE-2014-3660.
CVE-2015-7113	Apple Inc. watchOS		—	0.03	Dec 11, 2015	The LaunchServices component in Apple iOS before 9.2 and watchOS before 2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a malformed plist.
CVE-2015-7111	Apple Inc. tvOS		—	0.03	Dec 11, 2015	The IOHIDFamily API in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than…
CVE-2015-7109	Apple Inc. tvOS		—	0.02	Dec 11, 2015	IOAcceleratorFamily in Apple OS X before 10.11.2 and tvOS before 9.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVE-2015-7107	Apple Inc. Quicklook		—	0.03	Dec 11, 2015	QuickLook in Apple iOS before 9.2 and OS X before 10.11.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted iWork file.
CVE-2015-7105	Apple Inc. tvOS		—	0.04	Dec 11, 2015	CoreGraphics in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file.
CVE-2015-7104	Apple Inc. Safari		—	0.02	Dec 11, 2015	WebKit in Apple Safari before 9.0.2 and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVE-2015-7103	Apple Inc. Safari		—	0.03	Dec 11, 2015	WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2015-7048, CVE-2015-7095,…
CVE-2015-7102	Apple Inc. Safari		—	0.03	Dec 11, 2015	WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2015-7048, CVE-2015-7095,…
CVE-2015-7101	Apple Inc. Safari		—	0.03	Dec 11, 2015	WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2015-7048, CVE-2015-7095,…
CVE-2015-7100	Apple Inc. Safari		—	0.03	Dec 11, 2015	WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2015-7048, CVE-2015-7095,…
CVE-2015-7099	Apple Inc. Safari		—	0.03	Dec 11, 2015	WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2015-7048, CVE-2015-7095,…
CVE-2015-7098	Apple Inc. Safari		—	0.03	Dec 11, 2015	WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2015-7048, CVE-2015-7095,…
CVE-2015-7097	Apple Inc. Safari		—	0.03	Dec 11, 2015	WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2015-7048, CVE-2015-7095,…
CVE-2015-7096	Apple Inc. Safari		—	0.03	Dec 11, 2015	WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2015-7048, CVE-2015-7095,…
CVE-2015-7095	Apple Inc. Safari		—	0.03	Dec 11, 2015	WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2015-7048, CVE-2015-7096,…
CVE-2015-7094	Apple Inc. iOS		—	0.01	Dec 11, 2015	CFNetwork HTTPProtocol in Apple iOS before 9.2 and OS X before 10.11.2 allows man-in-the-middle attackers to bypass the HSTS protection mechanism via a crafted URL.
CVE-2015-7093	Apple Inc. Safari		—	0.01	Dec 11, 2015	Safari in Apple iOS before 9.2 allows remote attackers to spoof a URL in the user interface via a crafted web site.
CVE-2015-7082	Git Git		—	0.02	Dec 11, 2015	Multiple unspecified vulnerabilities in Git before 2.5.4, as used in Apple Xcode before 7.2, have unknown impact and attack vectors. NOTE: this CVE is associated only with Xcode use cases.
CVE-2015-7081	Apple Inc. iBooks		—	0.02	Dec 11, 2015	iBooks in Apple iOS before 9.2 and OS X before 10.11.2 allows remote attackers to read arbitrary files via an iBooks file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
CVE-2015-7080	Apple Inc. iOS		—	0.00	Dec 11, 2015	Siri in Apple iOS before 9.2 allows physically proximate attackers to bypass an intended client-side protection mechanism and obtain sensitive content-notification information by listening to a device in the lock-screen state.
CVE-2015-7079	Apple Inc. tvOS		—	0.03	Dec 11, 2015	dyld in Apple iOS before 9.2 and tvOS before 9.1 mishandles segment validation, which allows attackers to execute arbitrary code in a privileged context via a crafted app.
CVE-2015-7076	Apple Inc. OS X		—	0.00	Dec 11, 2015	The Intel Graphics Driver component in Apple OS X before 10.11.2 allows local users to gain privileges or cause a denial of service (NULL pointer dereference) via unspecified vectors.
CVE-2015-7075	Apple Inc. tvOS		—	0.04	Dec 11, 2015	CoreMedia Playback in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a malformed media file.
CVE-2015-7074	Apple Inc. tvOS		—	0.03	Dec 11, 2015	CoreMedia Playback in Apple iOS before 9.2, OS X before 10.11.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a malformed media file.

CVE-2022-0319MedJan 21, 2022
Vim
Vim
risk 0.00cvss 5.5epss 0.01
Out-of-bounds Read in vim/vim prior to 8.2.
CVE-2022-0318CriJan 21, 2022
Vim
Vim
risk 0.00cvss 9.8epss 0.02
Heap-based Buffer Overflow in vim/vim prior to 8.2.
CVE-2022-21658HigJan 20, 2022
Apple Inc.
macOS
risk 0.00cvss 7.3epss 0.01
Rust is a multi-paradigm, general-purpose programming language designed for performance and safety, especially safe concurrency. The Rust Security Response WG was notified that the `std::fs::remove_dir_all` standard library function is vulnerable a race condition enabling…
CVE-2022-0261HigJan 18, 2022
Vim
Vim
risk 0.00cvss 7.8epss 0.02
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
CVE-2022-0158LowJan 10, 2022
Vim
Vim
risk 0.00cvss 3.3epss 0.02
vim is vulnerable to Heap-based Buffer Overflow
CVE-2022-0156MedJan 10, 2022
Vim
Vim
risk 0.00cvss 5.5epss 0.02
vim is vulnerable to Use After Free
CVE-2022-0128HigJan 6, 2022
Vim
Vim
risk 0.00cvss 7.8epss 0.02
vim is vulnerable to Out-of-bounds Read
CVE-2021-4193MedDec 31, 2021
Vim
Vim
risk 0.00cvss 5.5epss 0.02
vim is vulnerable to Out-of-bounds Read
CVE-2021-4192HigDec 31, 2021
Vim
Vim
risk 0.00cvss 7.8epss 0.02
vim is vulnerable to Use After Free
CVE-2021-4187HigDec 29, 2021
Vim
Vim
risk 0.00cvss 7.8epss 0.02
vim is vulnerable to Use After Free
CVE-2021-4173HigDec 27, 2021
Vim
Vim
risk 0.00cvss 7.8epss 0.02
vim is vulnerable to Use After Free
CVE-2021-4166HigDec 25, 2021
Vim
Vim
risk 0.00cvss 7.1epss 0.02
vim is vulnerable to Out-of-bounds Read
CVE-2021-4136HigDec 19, 2021
Vim
Vim
risk 0.00cvss 7.8epss 0.02
vim is vulnerable to Heap-based Buffer Overflow
CVE-2020-8037HigNov 4, 2020
Tcpdump
Tcpdump
risk 0.00cvss 7.5epss 0.03
The ppp decapsulator in tcpdump 4.9.3 can be convinced to allocate a large amount of memory.
CVE-2019-14868HigApr 2, 2020
Ksh
ksh
risk 0.00cvss 7.4epss 0.01
In ksh version 20120801, a flaw was found in the way it evaluates certain environment variables. An attacker could use this flaw to override or bypass environment restrictions to execute shell commands. Services and applications that allow remote unauthenticated attackers to…
CVE-2019-15165MedOct 3, 2019
Libpcap
libpcap
risk 0.00cvss 5.3epss 0.03
sf-pcapng.c in libpcap before 1.9.1 does not properly validate the PHB header length before allocating memory.
CVE-2019-15166LowOct 3, 2019
Tcpdump
Tcpdump
risk 0.00cvss 1.6epss 0.05
lmp_print_data_link_subobjs() in print-lmp.c in tcpdump before 4.9.3 lacks certain bounds checks.
CVE-2018-16451HigOct 3, 2019
Tcpdump
Tcpdump
risk 0.00cvss 7.5epss 0.04
The SMB parser in tcpdump before 4.9.3 has buffer over-reads in print-smb.c:print_trans() for \MAILSLOT\BROWSE and \PIPE\LANMAN.
CVE-2018-16230HigOct 3, 2019
Tcpdump
Tcpdump
risk 0.00cvss 7.5epss 0.04
The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_attr_print() (MP_REACH_NLRI).
CVE-2018-16228HigOct 3, 2019
Tcpdump
Tcpdump
risk 0.00cvss 7.5epss 0.04
The HNCP parser in tcpdump before 4.9.3 has a buffer over-read in print-hncp.c:print_prefix().
CVE-2019-8906MedFeb 18, 2019
File Project
File
risk 0.00cvss 4.4epss 0.00
do_core_note in readelf.c in libmagic.a in file 5.35 has an out-of-bounds read because memcpy is misused.
CVE-2017-18248MedMar 26, 2018
Apple Inc.
Cups
risk 0.00cvss 5.3epss 0.02
The add_job function in scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is enabled, can be crashed by remote attackers by sending print jobs with an invalid username, related to a D-Bus notification.
CVE-2017-18190HigFeb 16, 2018
Apple Inc.
Cups
risk 0.00cvss 7.5epss 0.03
A localhost.localdomain whitelist entry in valid_host() in scheduler/client.c in CUPS before 2.2.2 allows remote attackers to execute arbitrary IPP commands by sending POST requests to the CUPS daemon in conjunction with DNS rebinding. The localhost.localdomain name is often…
CVE-2015-8242Dec 15, 2015
Xmlsoft
Libxml2
risk 0.00cvss —epss 0.04
The xmlSAX2TextNode function in SAX2.c in the push interface in the HTML parser in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service (stack-based buffer over-read and application crash) or obtain sensitive information via crafted XML data.
CVE-2015-7500Dec 15, 2015
Xmlsoft
Libxml2
risk 0.00cvss —epss 0.06
The xmlParseMisc function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to cause a denial of service (out-of-bounds heap read) via unspecified vectors related to incorrect entities boundaries and start tags.
CVE-2015-5312Dec 15, 2015
Xmlsoft
Libxml2
risk 0.00cvss —epss 0.04
The xmlStringLenDecodeEntities function in parser.c in libxml2 before 2.9.3 does not properly prevent entity expansion, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted XML data, a different vulnerability than CVE-2014-3660.
CVE-2015-7113Dec 11, 2015
Apple Inc.
watchOS
risk 0.00cvss —epss 0.03
The LaunchServices component in Apple iOS before 9.2 and watchOS before 2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a malformed plist.
CVE-2015-7111Dec 11, 2015
Apple Inc.
tvOS
risk 0.00cvss —epss 0.03
The IOHIDFamily API in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than…
CVE-2015-7109Dec 11, 2015
Apple Inc.
tvOS
risk 0.00cvss —epss 0.02
IOAcceleratorFamily in Apple OS X before 10.11.2 and tvOS before 9.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVE-2015-7107Dec 11, 2015
Apple Inc.
Quicklook
risk 0.00cvss —epss 0.03
QuickLook in Apple iOS before 9.2 and OS X before 10.11.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted iWork file.
CVE-2015-7105Dec 11, 2015
Apple Inc.
tvOS
risk 0.00cvss —epss 0.04
CoreGraphics in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file.
CVE-2015-7104Dec 11, 2015
Apple Inc.
Safari
risk 0.00cvss —epss 0.02
WebKit in Apple Safari before 9.0.2 and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVE-2015-7103Dec 11, 2015
Apple Inc.
Safari
risk 0.00cvss —epss 0.03
WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2015-7048, CVE-2015-7095,…
CVE-2015-7102Dec 11, 2015
Apple Inc.
Safari
risk 0.00cvss —epss 0.03
WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2015-7048, CVE-2015-7095,…
CVE-2015-7101Dec 11, 2015
Apple Inc.
Safari
risk 0.00cvss —epss 0.03
WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2015-7048, CVE-2015-7095,…
CVE-2015-7100Dec 11, 2015
Apple Inc.
Safari
risk 0.00cvss —epss 0.03
WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2015-7048, CVE-2015-7095,…
CVE-2015-7099Dec 11, 2015
Apple Inc.
Safari
risk 0.00cvss —epss 0.03
WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2015-7048, CVE-2015-7095,…
CVE-2015-7098Dec 11, 2015
Apple Inc.
Safari
risk 0.00cvss —epss 0.03
WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2015-7048, CVE-2015-7095,…
CVE-2015-7097Dec 11, 2015
Apple Inc.
Safari
risk 0.00cvss —epss 0.03
WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2015-7048, CVE-2015-7095,…
CVE-2015-7096Dec 11, 2015
Apple Inc.
Safari
risk 0.00cvss —epss 0.03
WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2015-7048, CVE-2015-7095,…
CVE-2015-7095Dec 11, 2015
Apple Inc.
Safari
risk 0.00cvss —epss 0.03
WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2015-7048, CVE-2015-7096,…
CVE-2015-7094Dec 11, 2015
Apple Inc.
iOS
risk 0.00cvss —epss 0.01
CFNetwork HTTPProtocol in Apple iOS before 9.2 and OS X before 10.11.2 allows man-in-the-middle attackers to bypass the HSTS protection mechanism via a crafted URL.
CVE-2015-7093Dec 11, 2015
Apple Inc.
Safari
risk 0.00cvss —epss 0.01
Safari in Apple iOS before 9.2 allows remote attackers to spoof a URL in the user interface via a crafted web site.
CVE-2015-7082Dec 11, 2015
Git
Git
risk 0.00cvss —epss 0.02
Multiple unspecified vulnerabilities in Git before 2.5.4, as used in Apple Xcode before 7.2, have unknown impact and attack vectors. NOTE: this CVE is associated only with Xcode use cases.
CVE-2015-7081Dec 11, 2015
Apple Inc.
iBooks
risk 0.00cvss —epss 0.02
iBooks in Apple iOS before 9.2 and OS X before 10.11.2 allows remote attackers to read arbitrary files via an iBooks file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
CVE-2015-7080Dec 11, 2015
Apple Inc.
iOS
risk 0.00cvss —epss 0.00
Siri in Apple iOS before 9.2 allows physically proximate attackers to bypass an intended client-side protection mechanism and obtain sensitive content-notification information by listening to a device in the lock-screen state.
CVE-2015-7079Dec 11, 2015
Apple Inc.
tvOS
risk 0.00cvss —epss 0.03
dyld in Apple iOS before 9.2 and tvOS before 9.1 mishandles segment validation, which allows attackers to execute arbitrary code in a privileged context via a crafted app.
CVE-2015-7076Dec 11, 2015
Apple Inc.
OS X
risk 0.00cvss —epss 0.00
The Intel Graphics Driver component in Apple OS X before 10.11.2 allows local users to gain privileges or cause a denial of service (NULL pointer dereference) via unspecified vectors.
CVE-2015-7075Dec 11, 2015
Apple Inc.
tvOS
risk 0.00cvss —epss 0.04
CoreMedia Playback in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a malformed media file.
CVE-2015-7074Dec 11, 2015
Apple Inc.
tvOS
risk 0.00cvss —epss 0.03
CoreMedia Playback in Apple iOS before 9.2, OS X before 10.11.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a malformed media file.

Page 125 of 181