CVE-2015-5870: Exposure of Sensitive Information to an Unauthorized Actor

The debugging interfaces in the kernel in Apple OS X before 10.11 allow local users to obtain sensitive memory-layout information via unspecified vectors...

CVE-2015-5893: Exposure of Sensitive Information to an Unauthorized Actor

SMBClient in SMB in Apple OS X before 10.11 allows local users to obtain sensitive kernel memory-layout information via unspecified vectors...

CVE-2015-5865: Exposure of Sensitive Information to an Unauthorized Actor

IOGraphics in Apple OS X before 10.11 allows attackers to obtain sensitive kernel memory-layout information via a crafted app...

CVE-2015-5864: Exposure of Sensitive Information to an Unauthorized Actor

IOAudioFamily in Apple OS X before 10.11 allows local users to obtain sensitive kernel memory-layout information via unspecified vectors...

Flash Player Adobe Integrated Runtime ASLR Bypass

The vulnerability of the Flash Player and Adobe Integrated Runtime programming platforms is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass ASLR protection due to errors in access control to memory cells...

Apple OS X Kernel Information Disclosure Vulnerability

Apple OS X is a specialized operating system developed by Apple for Mac computers. kernel is one of the kernel components. A security vulnerability exists in the debugging interface of the Kernel in Apple OS X 10.10.5 and earlier versions. A local attacker could exploit this vulnerability to obta...

CVE-2015-6927

vzctl before 4.9.4 determines the virtual environment VE layout based on the presence of root.hdd/DiskDescriptor.xml in the VE private directory, which allows local simfs container CT root users to change the root password for arbitrary ploop containers, as demonstrated by a symlink attack on the...

CVE-2015-6927

vzctl before 4.9.4 determines the virtual environment VE layout based on the presence of root.hdd/DiskDescriptor.xml in the VE private directory, which allows local simfs container CT root users to change the root password for arbitrary ploop containers, as demonstrated by a symlink attack on the...

Windows OS ASLR Bypass

The vulnerability of the Windows operating system’s kernel is related to deficiencies in access control for certain functions. Exploiting this vulnerability allows a malicious actor to bypass the ASLR protection mechanism by using a specially crafted application...

Microsoft Windows Kernel - Pool Buffer Overflow Drawing Caption Bar (MS15-061)

Microsoft Windows Kernel - Pool Buffer Overflow Drawing Caption Bar MS15-061 Source: https://code.google.com/p/google-security-research/issues/detail?id=321 The PoC triggers a crashes due to a pool buffer overflow while drawing the caption bar of window. The trigger depends on the current window...

CVE-2015-5831

NetworkExtension in the kernel in Apple iOS before 9 does not properly initialize an unspecified data structure, which allows attackers to obtain sensitive memory-layout information via a crafted app...

CVE-2015-5831

NetworkExtension in the kernel in Apple iOS before 9 does not properly initialize an unspecified data structure, which allows attackers to obtain sensitive memory-layout information via a crafted app...

CVE-2015-5842

CVE-2015-5842 affects Apple’s XNU kernel (macOS/iOS) where an uninitialized kernel data structure could allow a local attacker to determine kernel memory layout. The connected Nessus/NASL entries confirm the root cause as a kernel memory-layout disclosure and note that the issue was mitigated by ...

CVE-2015-5842

XNU in the kernel in Apple iOS before 9 does not properly initialize an unspecified data structure, which allows local users to obtain sensitive memory-layout information via unknown vectors...

CVE-2015-5834

CVE-2015-5834 involves the IOAcceleratorFamily in iOS prior to version 9. A crafted app could cause a disclosure of the kernel memory layout. The root cause is a memory-disclosure path in IOAcceleratorFamily that was addressed by improved bounds checking. The impact is limited to information expo...

PT-2015-2096

Name of the Vulnerable Software and Affected Versions XNU in Apple iOS versions prior to 9 Description The issue is related to a lack of protection for internal data in the XNU kernel component of the iOS operating system. This could allow a local attacker to access protected information stored i...

PT-2015-2089

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9 Description The issue is related to the IOAcceleratorFamily component in iOS, which lacks protection of internal data. This allows a remote attacker to obtain sensitive kernel memory-layout information via a craft...

CVE-2015-5834: Exposure of Sensitive Information to an Unauthorized Actor

IOAcceleratorFamily in Apple iOS before 9 allows attackers to obtain sensitive kernel memory-layout information via a crafted app...

CVE-2015-5831: Exposure of Sensitive Information to an Unauthorized Actor

NetworkExtension in the kernel in Apple iOS before 9 does not properly initialize an unspecified data structure, which allows attackers to obtain sensitive memory-layout information via a crafted app...

CVE-2015-5842: Exposure of Sensitive Information to an Unauthorized Actor

XNU in the kernel in Apple iOS before 9 does not properly initialize an unspecified data structure, which allows local users to obtain sensitive memory-layout information via unknown vectors...