Search Results (Refine Search)
- CPE Product Version: cpe:/o:apple:iphone_os:1.0.2
Vuln ID | Summary | CVSS Severity |
---|---|---|
CVE-2015-7053 |
ImageIO in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted image. Published: December 11, 2015; 6:59:19 AM -0500 |
V3.x:(not available) V2.0: 6.8 MEDIUM |
CVE-2015-7051 |
MobileStorageMounter in Apple iOS before 9.2 and tvOS before 9.1 mishandles the timing of trust-cache loading, which allows attackers to execute arbitrary code in a privileged context via a crafted app. Published: December 11, 2015; 6:59:17 AM -0500 |
V3.x:(not available) V2.0: 9.3 HIGH |
CVE-2015-7050 |
WebKit in Apple iOS before 9.2 and Safari before 9.0.2 misparses content extensions, which allows remote attackers to obtain sensitive browsing-history information via a crafted web site. Published: December 11, 2015; 6:59:16 AM -0500 |
V3.x:(not available) V2.0: 4.3 MEDIUM |
CVE-2015-7048 |
WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2015-7095, CVE-2015-7096, CVE-2015-7097, CVE-2015-7098, CVE-2015-7099, CVE-2015-7100, CVE-2015-7101, CVE-2015-7102, and CVE-2015-7103. Published: December 11, 2015; 6:59:13 AM -0500 |
V3.x:(not available) V2.0: 6.8 MEDIUM |
CVE-2015-7047 |
The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to gain privileges via a crafted mach message that is misparsed. Published: December 11, 2015; 6:59:12 AM -0500 |
V3.x:(not available) V2.0: 7.2 HIGH |
CVE-2015-7046 |
The Sandbox feature in xnu in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 does not properly implement privilege separation, which allows attackers to bypass the ASLR protection mechanism via a crafted app with root privileges. Published: December 11, 2015; 6:59:11 AM -0500 |
V3.x:(not available) V2.0: 2.6 LOW |
CVE-2015-7043 |
The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to cause a denial of service via a crafted app, a different vulnerability than CVE-2015-7040, CVE-2015-7041, and CVE-2015-7042. Published: December 11, 2015; 6:59:08 AM -0500 |
V3.x:(not available) V2.0: 4.3 MEDIUM |
CVE-2015-7042 |
The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to cause a denial of service via a crafted app, a different vulnerability than CVE-2015-7040, CVE-2015-7041, and CVE-2015-7043. Published: December 11, 2015; 6:59:07 AM -0500 |
V3.x:(not available) V2.0: 4.3 MEDIUM |
CVE-2015-7041 |
The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to cause a denial of service via a crafted app, a different vulnerability than CVE-2015-7040, CVE-2015-7042, and CVE-2015-7043. Published: December 11, 2015; 6:59:06 AM -0500 |
V3.x:(not available) V2.0: 4.3 MEDIUM |
CVE-2015-7040 |
The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to cause a denial of service via a crafted app, a different vulnerability than CVE-2015-7041, CVE-2015-7042, and CVE-2015-7043. Published: December 11, 2015; 6:59:05 AM -0500 |
V3.x:(not available) V2.0: 4.3 MEDIUM |
CVE-2015-7039 |
Buffer overflow in libc in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code via a crafted package, a different vulnerability than CVE-2015-7038. Published: December 11, 2015; 6:59:04 AM -0500 |
V3.x:(not available) V2.0: 6.8 MEDIUM |
CVE-2015-7038 |
Buffer overflow in libc in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code via a crafted package, a different vulnerability than CVE-2015-7039. Published: December 11, 2015; 6:59:02 AM -0500 |
V3.x:(not available) V2.0: 6.8 MEDIUM |
CVE-2015-7037 |
Directory traversal vulnerability in Mobile Backup in Photos in Apple iOS before 9.2 allows attackers to read arbitrary files via a crafted pathname. Published: December 11, 2015; 6:59:01 AM -0500 |
V3.x:(not available) V2.0: 5.0 MEDIUM |
CVE-2015-7001 |
AppSandbox in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 mishandles hard links, which allows attackers to bypass Contacts access revocation via a crafted app. Published: December 11, 2015; 6:59:00 AM -0500 |
V3.x:(not available) V2.0: 6.8 MEDIUM |
CVE-2015-7036 |
The fts3_tokenizer function in SQLite, as used in Apple iOS before 8.4 and OS X before 10.10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a SQL command that triggers an API call with a crafted pointer value in the second argument. Published: November 21, 2015; 10:59:02 PM -0500 |
V3.x:(not available) V2.0: 7.5 HIGH |
CVE-2015-5859 |
The CFNetwork HTTPProtocol component in Apple iOS before 9 and OS X before 10.11 does not properly recognize the HSTS preload list during a Safari private-browsing session, which makes it easier for remote attackers to obtain sensitive information by sniffing the network. Published: November 21, 2015; 10:59:01 PM -0500 |
V3.x:(not available) V2.0: 4.3 MEDIUM |
CVE-2015-5787 |
The kernel in Apple iOS before 8.4.1 does not properly restrict debugging features, which allows attackers to bypass background-execution limitations via a crafted app. Published: November 21, 2015; 10:59:00 PM -0500 |
V3.x:(not available) V2.0: 4.3 MEDIUM |
CVE-2015-8035 |
The xz_decomp function in xzlib.c in libxml2 2.9.1 does not properly detect compression errors, which allows context-dependent attackers to cause a denial of service (process hang) via crafted XML data. Published: November 18, 2015; 11:59:09 AM -0500 |
V3.x:(not available) V2.0: 2.6 LOW |
CVE-2015-7942 |
The xmlParseConditionalSections function in parser.c in libxml2 does not properly skip intermediary entities when it stops parsing invalid input, which allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via crafted XML data, a different vulnerability than CVE-2015-7941. Published: November 18, 2015; 11:59:06 AM -0500 |
V3.x:(not available) V2.0: 6.8 MEDIUM |
CVE-2015-7995 |
The xsltStylePreCompute function in preproc.c in libxslt 1.1.28 does not check if the parent node is an element, which allows attackers to cause a denial of service via a crafted XML file, related to a "type confusion" issue. Published: November 17, 2015; 10:59:16 AM -0500 |
V3.x:(not available) V2.0: 5.0 MEDIUM |