2157 matches found
CVE-2015-3695
Technical details about CVE-2015-3695 are not publicly provided in the supplied documents; there is no confirmed description of affected products, root cause, or remediation here. Monitor for updates.
CVE-2015-3695
Buffer overflow in the Intel Graphics Driver in Apple OS X before 10.10.4 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2015-3696, CVE-2015-3697, CVE-2015-3698, CVE-2015-3699, CVE-2015-3700, CVE-2015-3701, and CVE-2015-3702...
CVE-2015-3715
The code-signing implementation in Apple OS X before 10.10.4 does not properly consider libraries that are external to an application bundle, which allows attackers to bypass intended launch restrictions via a crafted library...
CVE-2015-3707
The FireWire driver in IOFireWireFamily in Apple OS X before 10.10.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service NULL pointer dereference via a crafted app...
CVE-2015-3711
The NTFS implementation in Apple OS X before 10.10.4 allows attackers to obtain sensitive memory-layout information for the kernel via a crafted app...
CVE-2015-3691
The Monitor Control Command Set kernel extension in the Display Drivers subsystem in Apple OS X before 10.10.4 allows attackers to execute arbitrary code in a privileged context via a crafted app that leverages control of a function pointer...
CVE-2015-3709
CVE-2015-3709 refers to a TOCTOU race condition in Apple’s kext tools on macOS OS X Yosemite prior to 10.10.4. The flaw occurs during kernel-extension path validation, allowing a local user to bypass signature checks and load unsigned kernel extensions. Public details in connected docs indicate t...
CVE-2015-3671
Admin Framework in Apple OS X before 10.10.4 does not properly verify XPC entitlements, which allows local users to bypass authentication and obtain admin privileges via unspecified vectors...
CVE-2015-3716
Spotlight in Apple OS X before 10.10.4 allows attackers to execute arbitrary commands via a crafted name of a photo file within the local photo library...
CVE-2015-3699
Buffer overflow in the Intel Graphics Driver in Apple OS X before 10.10.4 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2015-3695, CVE-2015-3696, CVE-2015-3697, CVE-2015-3698, CVE-2015-3700, CVE-2015-3701, and CVE-2015-3702...
CVE-2015-3702
Buffer overflow in the Intel Graphics Driver in Apple OS X before 10.10.4 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2015-3695, CVE-2015-3696, CVE-2015-3697, CVE-2015-3698, CVE-2015-3699, CVE-2015-3700, and CVE-2015-3701...
CVE-2015-3720
The kernel in Apple OS X before 10.10.4 does not properly manage memory in kernel-extension APIs, which allows attackers to obtain sensitive memory-layout information via a crafted app...
CVE-2015-3702
Technical details for CVE-2015-3702 are not publicly provided in the supplied documents; no product, vulnerability scope, or impact is described beyond the high-level description. Monitor for updates from official sources.
CVE-2015-3701
CVE-2015-3701 describes a buffer overflow in the Intel Graphics Driver on Apple OS X prior to 10.10.4, enabling local privilege escalation. Impact: local attacker could gain privileges via unspecified vectors. Affected: OS X versions before 10.10.4 with Intel graphics support. Root cause: buffer ...
CVE-2015-3675
CVE-2015-3675 affects Apple OS X: the default Apache HTTP Server configuration prior to OS X 10.10.4 does not enable the mod_hfs_apple module, allowing remote attackers to bypass HTTP authentication via a crafted URL. The issue is mitigated by enabling mod_hfs_apple or upgrading to OS X 10.10.4 (...
CVE-2015-3718
CVE-2015-3718 affects Apple OS X (System Stats): a type confusion vulnerability in systemstatsd during interprocess communication could allow a crafted app to execute arbitrary code with systemstatsd privileges. The issue is described for OS X Yosemite/10.10.x prior to 10.10.4, with the root caus...
CVE-2015-3697
Buffer overflow in the Intel Graphics Driver in Apple OS X before 10.10.4 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2015-3695, CVE-2015-3696, CVE-2015-3698, CVE-2015-3699, CVE-2015-3700, CVE-2015-3701, and CVE-2015-3702...
CVE-2015-3707
The CVE concerns the FireWire driver IOFireWireFamily in Apple OS X, with affected range OS X Yosemite up to 10.10.3. Description: IOFireWireFamily contains multiple null pointer dereference issues that can allow a crafted app to execute arbitrary code in a privileged context or cause a denial of...