EUVD-2015-6967

Malware in sbrugna...

CVE-2015-7035

Apple Mac EFI before 2015-002, as used in OS X before 10.11.1 and other products, mishandles arguments, which allows attackers to reach "unused" functions via unspecified vectors...

PT-2015-2446

Name of the Vulnerable Software and Affected Versions Apple Mac EFI versions before 2015-002 OS X versions prior to 10.11.1 Description The issue is related to errors in the code of the EFI module in Mac OS X, which can be exploited by a remote attacker to access undeclared functions. The...

CVE-2015-7035: Undefined Security Weakness

Apple Mac EFI before 2015-002, as used in OS X before 10.11.1 and other products, mishandles arguments, which allows attackers to reach "unused" functions via unspecified vectors...

CVE-2015-3693

Apple Mac EFI before 2015-001, as used in OS X before 10.10.4 and other products, does not properly set refresh rates for DDR3 RAM, which might make it easier for remote attackers to conduct row-hammer attacks, and consequently gain privileges or cause a denial of service memory corruption, by...

PT-2015-6291

Name of the Vulnerable Software and Affected Versions Apple Mac EFI versions before 2015-001 OS X versions prior to 10.10.4 Description The issue is related to the improper setting of refresh rates for DDR3 RAM, which could facilitate row-hammer attacks. This might allow remote attackers to gain...

PT-2015-6290

Name of the Vulnerable Software and Affected Versions Apple Mac EFI versions before 2015-001 OS X versions prior to 10.10.4 Description The issue allows local users to conduct EFI flash attacks by leveraging root privileges, due to the lack of a locking protection mechanism when the system is wok...

CVE-2015-3693: Undefined Security Weakness

Apple Mac EFI before 2015-001, as used in OS X before 10.10.4 and other products, does not properly set refresh rates for DDR3 RAM, which might make it easier for remote attackers to conduct row-hammer attacks, and consequently gain privileges or cause a denial of service memory corruption, by...

CVE-2015-3692: Improper Access Control

Apple Mac EFI before 2015-001, as used in OS X before 10.10.4 and other products, does not enforce a locking protection mechanism upon being woken from sleep, which allows local users to conduct EFI flash attacks by leveraging root privileges...