CVE-2015-3766

The kernel in Apple iOS before 8.4.1 and OS X before 10.10.5 does not properly restrict the machportspaceinfo interface, which allows attackers to obtain sensitive memory-layout information via a crafted app...

Design/Logic Flaw

The kernel in Apple iOS before 8.4.1 and OS X before 10.10.5 does not properly restrict the machportspaceinfo interface, which allows attackers to obtain sensitive memory-layout information via a crafted app...

Memory corruption

The Bluetooth subsystem in Apple OS X before 10.10.5 allows attackers to obtain sensitive kernel memory-layout information via a crafted app...

CVE-2015-5768

AppleGraphicsControl in Apple OS X before 10.10.5 allows attackers to obtain sensitive kernel memory-layout information via a crafted app...

CVE-2015-3766

The kernel in Apple iOS before 8.4.1 and OS X before 10.10.5 does not properly restrict the machportspaceinfo interface, which allows attackers to obtain sensitive memory-layout information via a crafted app...

Microsoft MSXML generate-id Information Disclosure Vulnerability

This vulnerability allows remote attackers to gain information about the layout of memory on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

One Perfect Bug: Exploiting Type Confusion in Flash

Posted by Natalie Silvanovich, Dazed and Type Confused For some attackers, it is important that an exploit be extremely reliable. That is to say, the exploit should consistently lead to code execution when it is run on a system with a known platform and Flash version. One way to create such an...

Unspecified vulnerability in Apple OS X kernel

Apple OS X is an Apple operating system. A security vulnerability in the kernel of Apple OS X versions prior to 10.10.4 allows an attacker to exploit the vulnerability to obtain sensitive memory-layout information with the help of a specially crafted application...

CVE-2015-3721

The kernel in Apple iOS before 8.4 and OS X before 10.10.4 does not properly handle HFS parameters, which allows attackers to obtain sensitive memory-layout information via a crafted app...

CVE-2015-3711

The NTFS implementation in Apple OS X before 10.10.4 allows attackers to obtain sensitive memory-layout information for the kernel via a crafted app...

Design/Logic Flaw

The kernel in Apple iOS before 8.4 and OS X before 10.10.4 does not properly handle HFS parameters, which allows attackers to obtain sensitive memory-layout information via a crafted app...

Information disclosure

The NTFS implementation in Apple OS X before 10.10.4 allows attackers to obtain sensitive memory-layout information for the kernel via a crafted app...

Design/Logic Flaw

The kernel in Apple OS X before 10.10.4 does not properly manage memory in kernel-extension APIs, which allows attackers to obtain sensitive memory-layout information via a crafted app...

CVE-2015-3690

The DiskImages subsystem in Apple iOS before 8.4 and OS X before 10.10.4 allows attackers to obtain sensitive memory-layout information for the kernel via a crafted app...

Design/Logic Flaw

The LZVN compression feature in AppleFSCompression in Apple OS X before 10.10.4 allows attackers to obtain sensitive memory-layout information for the kernel via a crafted app...

Design/Logic Flaw

The DiskImages subsystem in Apple iOS before 8.4 and OS X before 10.10.4 allows attackers to obtain sensitive memory-layout information for the kernel via a crafted app...

Design/Logic Flaw

AppleGraphicsControl in Apple OS X before 10.10.4 allows attackers to obtain sensitive memory-layout information via a crafted app...

CVE-2015-3676

AppleGraphicsControl in OS X before 10.10.4 could disclose kernel memory layout via a crafted app. The CVE-2015-3676 issue affects OS X Yosemite prior to the 10.10.4 Security Update, which addresses memory-disclosure by improving bounds checking in AppleGraphicsControl. There is no exploitable de...

CVE-2015-3711

CVE-2015-3711 affects Apple OS X NTFS memory-layout disclosure. The vulnerability arises from the NTFS implementation and can expose kernel memory layout via a crafted app. Affected OS X versions before 10.10.4 are implicated; remediation is to upgrade to OS X 10.10.4 (Security Update 2015‑005), ...

CVE-2015-3677

CVE-2015-3677 affects Apple OS X prior to 10.10.4, specifically the LZVN compression feature in AppleFSCompression. The vulnerability allows a crafted app to disclose kernel memory layout, a memory-disclosure issue in LZVN processing. The underlying impact is partial leakage of kernel memory layo...