Design/Logic Flaw

fontd in Apple Type Services ATS in Apple OS X before 10.10.3 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2015-1131, CVE-2015-1132, CVE-2015-1133, and CVE-2015-1134...

Open redirect

Open Directory Client in Apple OS X before 10.10.3 sends unencrypted password-change requests in certain circumstances involving missing certificates, which allows remote attackers to obtain sensitive information by sniffing the network...

Design/Logic Flaw

Use-after-free vulnerability in CoreAnimation in Apple OS X before 10.10.3 allows remote attackers to execute arbitrary code by leveraging improper use of a mutex...

Memory corruption

FontParser in Apple iOS before 8.3 and Apple OS X before 10.10.3 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font file...

Race condition

Race condition in the setreuid system-call implementation in the kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 allows attackers to cause a denial of service via a crafted app...

Memory corruption

ImageIO in Apple OS X before 10.10.3 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted .sgi file...

CVE-2015-1130

The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and obtain admin privileges via unspecified vectors...

CVE-2015-1140

CVE-2015-1140 refers to a buffer overflow in IOHIDFamily on Apple macOS prior to 10.10.3 that could let local users gain privileges. The provided Connected documents do not include additional technical details (no concrete root-cause, affected subcomponents, versions beyond the OS X pre-10.10.3 w...

CVE-2015-1143

LaunchServices in Apple OS X before 10.10.3 allows local users to gain privileges via a crafted localized string, related to a "type confusion" issue...

CVE-2015-1132

Technical details for CVE-2015-1132 are not publicly available in the provided documents. Monitor for updates from vendors and security advisories.

CVE-2015-1148

CVE-2015-1148 affects Apple OS X versions earlier than 10.10.3. The vulnerability arises because Screen Sharing stores a user’s password in a log file, which could allow a context-dependent (local) attacker to read sensitive information from that file. The available documents specify the affected...

CVE-2015-1148

Screen Sharing in Apple OS X before 10.10.3 stores the password of a user in a log file, which might allow context-dependent attackers to obtain sensitive information by reading this file...

CVE-2015-1141

CVE-2015-1141 affects Apple OS X kernel (mach_vm_read) prior to 10.10.3. Local users can crash the system (DoS) via unspecified vectors due to a flaw in mach_vm_read handling in the kernel. Root cause: inadequate handling of mach_vm_read operations in the kernel. Affected product: Apple OS X befo...

CVE-2015-1134

fontd in Apple Type Services ATS in Apple OS X before 10.10.3 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2015-1131, CVE-2015-1132, CVE-2015-1133, and CVE-2015-1135...

CVE-2015-1099

Race condition in the setreuid system-call implementation in the kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 allows attackers to cause a denial of service via a crafted app...

CVE-2015-1146

The CVE-2015-1146 entry concerns Apple OS X before 10.10.3 where the Code Signing implementation does not properly validate signatures, enabling a local attacker to bypass access restrictions via a crafted bundle. Impact is local privilege escalation through signature bypass. The connected NVD en...

CVE-2015-1099

CVE-2015-1099 is a race condition in the kernel setreuid system-call that can cause a denial of service. Affected products include Apple iOS prior to 8.3, OS X prior to 10.10.3, and Apple TV prior to 7.2. Exploitation details are not provided beyond “crafted app”; remediation is to update to the ...

CVE-2015-1133

fontd in Apple Type Services ATS in Apple OS X before 10.10.3 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2015-1131, CVE-2015-1132, CVE-2015-1134, and CVE-2015-1135...

CVE-2015-1118

CVE-2015-1118 affects libnetcore on Apple iOS <8.3, macOS <10.10.3, and Apple TV

CVE-2015-1146

The Code Signing implementation in Apple OS X before 10.10.3 does not properly validate signatures, which allows local users to bypass intended access restrictions via a crafted bundle, a different vulnerability than CVE-2015-1145...