8884 matches found
CVE-2015-7001
AppSandbox in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 mishandles hard links, which allows attackers to bypass Contacts access revocation via a crafted app...
CVE-2015-7001
CVE-2015-7001 affects Apple platforms: iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1. The underlying issue is AppSandbox mishandling hard links, which allows a crafted app to bypass Contacts access revocation. This is the explicit vulnerability described in CVE sour...
CVE-2015-7059
Apple OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 are affected by CVE-2015-7059 via a flaw in the ASN.1 decoder that allows remote attackers to trigger memory corruption or arbitrary code execution through a crafted certificate. The report aggregates multiple CVEs in Apple’s 2015...
CVE-2015-7043
Technical details for CVE-2015-7043 are not publicly available in the provided documents; monitor for updates.
CVE-2015-7041
Technical details about CVE-2015-7041 are not publicly provided in the connected documents. The initial entry notes a denial-of-service risk in Apple OS/iOS/watchOS/tvOS prior to certain versions, but no concrete vendor/product/version specifics or fixes are included here; monitor for updates.
CVE-2015-7046
The CVE-2015-7046 issue affects Apple’s OS X/iOS/tvOS/watchOS: the Sandbox in xnu does not properly enforce privilege separation, allowing a crafted app with root privileges to bypass ASLR. Affected: iOS prior to 9.2, OS X prior to 10.11.2, tvOS prior to 9.1, watchOS prior to 2.1. Impact stated i...
CVE-2015-7112
The IOHIDFamily API in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app, a different vulnerability than CVE-2015-7111...
CVE-2015-7084
The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to gain privileges or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2015-7083...
CVE-2015-7075
CoreMedia Playback in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a malformed media file...
CVE-2015-7073
Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted SSL handshake...
CVE-2015-7039
Technical details about CVE-2015-7039 are not provided in the supplied connected documents or the Initial Description; monitor for official disclosures and updates.
CVE-2015-7064
CVE-2015-7064 affects OpenGL on Apple platforms: iOS < 9.2, OS X < 10.11.2, tvOS < 9.1, and watchOS
CVE-2015-7042
CVE-2015-7042 concerns the Apple kernel that can be triggered on multiple Apple operating systems by a crafted app, leading to denial of service. Affected products/versions include iOS prior to 9.2, OS X prior to 10.11.2, tvOS prior to 9.1, and watchOS prior to 2.1. The description specifies this...
CVE-2015-7075
CVE-2015-7075 affects CoreMedia Playback across Apple platforms: iOS <9.2, OS X <10.11.2, tvOS <9.1, and watchOS
Apple Releases Multiple Security Updates
Apple has released security updates for iOS, tvOS, OS X, watchOS, Safari, and Xcode to address multiple vulnerabilities, one of which could allow a remote attacker to take control of an affected system. Updates available include: iOS 9.2 for iPhone 4s and later, iPod touch 5th generation and late...
Apple iOS/OS X/watchOS ImageIO memory corruption vulnerability (CNVD-2015-07100)
OS X formerly Mac OS X is the latest version of Apple's proprietary operating system for the Macintosh computer. iOS is an operating system developed by Apple for mobile devices. A security vulnerability exists in Apple iOS versions prior to 9.1, OS X versions prior to 10.11.1, and watchOS versio...
Apple iOS/OS X/watchOS memory corruption vulnerability (CNVD-2015-07104)
OS X formerly Mac OS X is the latest version of Apple's proprietary operating system for the Macintosh computer. iOS is an operating system developed by Apple for mobile devices. A security vulnerability exists in Apple iOS prior to 9.1, Apple OS X prior to 10.11.1, and watchOS prior to 2.0.1...
Apple iOS/OS X/watchOS ImageIO memory corruption vulnerability (CNVD-2015-07102)
OS X formerly Mac OS X is the latest version of Apple's proprietary operating system for the Macintosh computer. iOS is an operating system developed by Apple for mobile devices. A security vulnerability exists in Apple iOS versions prior to 9.1, OS X versions prior to 10.11.1, and watchOS versio...
APPLE-SA-2015-10-21-2 watchOS 2.0.1
APPLE-SA-2015-10-21-2 watchOS 2.0.1 watchOS 2.0.1 is now available and addresses the following: Apple Pay Available for: Apple Watch Sport, Apple Watch, Apple Watch Edition, and Apple Watch Hermes Impact: Some cards may allow a terminal to retrieve limited recent transaction information when maki...