Design/Logic Flaw

SecurityAgent in Apple OS X before 10.11.1 does not prevent synthetic clicks from reaching keychain windows, which allows attackers to bypass intended access restrictions via a crafted app...

The vulnerability of the Mac OS X operating system, which allows a hacker to compromise the security of information.

The vulnerability of the Mac OS X operating system is related to errors in displaying the current status of the security keychain. Exploiting this vulnerability can allow a malicious actor to compromise the security of information remotely...

iOS core application design vulnerability that exposed the user's Apple ID credentials-vulnerability warning-the black bar safety net

! Check Point alert of the Apple iOS to the core application may be exposed to user credentials. Fortunately iOS 9 contains the relevant patch. Apple ID the ios operating system specifically for user provides convenience to users themselves through an Apple ID to manage the device. Now, iOS marke...

CVE-2015-5915

Apple OS X before 10.11 does not ensure that the keychain's lock state is displayed correctly, which has unspecified impact and attack vectors...

CVE-2015-5854

The backup implementation in Time Machine in Apple OS X before 10.11 allows local users to obtain access to keychain items via unspecified vectors...

CVE-2015-5836

Apple Online Store Kit in Apple OS X before 10.11 improperly validates iCloud keychain item ACLs, which allows attackers to obtain access to keychain items via a crafted app...

Code injection

Apple OS X before 10.11 does not ensure that the keychain's lock state is displayed correctly, which has unspecified impact and attack vectors...

Design/Logic Flaw

Apple Online Store Kit in Apple OS X before 10.11 improperly validates iCloud keychain item ACLs, which allows attackers to obtain access to keychain items via a crafted app...

Information disclosure

The backup implementation in Time Machine in Apple OS X before 10.11 allows local users to obtain access to keychain items via unspecified vectors...

CVE-2015-5836

Apple Online Store Kit in Apple OS X before 10.11 improperly validates iCloud keychain item ACLs, which allows attackers to obtain access to keychain items via a crafted app...

CVE-2015-5836

CVE-2015-5836 affects Apple OS X prior to 10.11 via Apple Online Store Kit; the vulnerability is improper validation of iCloud keychain item ACLs, which could let a crafted app access keychain items. The impact is access to keychain data as described in the linked Apple security update notes and ...

CVE-2015-5854

CVE-2015-5854 : Time Machine backup functionality in Apple OS X prior to 10.11 can allow local users to obtain access to keychain items via unspecified vectors. According to the sources, the vulnerability is associated with OS X Time Machine backups and is addressed by OS X 10.11 El Capitan. Reme...

CVE-2015-5915

CVE-2015-5915 affects Apple OS X before 10.11 where the keychain lock state may not be displayed correctly. The initial description notes unspecified impact/attack vectors. Connected CNVD-2015-06402 describes a state management issue enabling an attacker to obtain keychain lock state information....

CVE-2015-5854

The backup implementation in Time Machine in Apple OS X before 10.11 allows local users to obtain access to keychain items via unspecified vectors...

CVE-2015-5915

Apple OS X before 10.11 does not ensure that the keychain's lock state is displayed correctly, which has unspecified impact and attack vectors...

APPLE-SA-2015-09-30-3 OS X El Capitan 10.11

APPLE-SA-2015-09-30-3 OS X El Capitan 10.11 OS X El Capitan 10.11 is now available and addresses the following: Address Book Available for: Mac OS X v10.6.8 and later Impact: A local attacker may be able to inject arbitrary code to processes loading the Address Book framework Description: An issu...

Apple OS X keychain information disclosure vulnerability

Apple OS X is an operating system developed by Apple Inc. A security vulnerability in the Apple OS X iCloud keychain item checksum access control list allows an attacker to exploit the vulnerability to access a targeted user's keychain item...

Apple OS X keychain lock state tracking vulnerability

Apple OS X is an operating system developed by Apple Inc. Apple OS X keychain lock state has a state management issue that fails to properly restrict it to the user. An attacker can exploit the vulnerability to obtain keychain lock state information...

Apple OS X Time Machine Architecture Backup Vulnerability

Apple OS X is an operating system developed by Apple Inc. Apple OS X has a problem with backups through the time machine architecture, allowing local attackers to exploit vulnerabilities to obtain keychain item information...

Apple Patches 100+ Vulnerabilities in OS X, Safari, iOS

UPDATE Apple pushed out its latest operating system, El Capitan, yesterday, and while it boasts many security fixes, the update fails to address the outstanding vulnerability in Gatekeeper that came to light this week. The issue with Gatekeeper, as described yesterday by Patrick Wardle, the...