|
2641
|
-
9.3
|
HIGH
|
AppleMobileFileIntegrity in Apple iOS before 9.2 and tvOS before 9.1 does not prevent changes to access-control structures, which allows attackers to execute arbitrary code in a privileged context vi…
|
CWE-284
Improper Access Control
|
CVE-2015-7055
|
cpe:2.3:o:apple:iphone_os:*:*
|
|
9.1
|
|
|
2024-11-21 11:36
2015-12-11
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2642
|
-
6.8
|
MEDIUM
|
zlib in the Compression component in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 does not initialize memory for an unspecified data structure, which allows remo…
|
CWE-19
Data Processing Errors
|
CVE-2015-7054
|
cpe:2.3:o:apple:iphone_os:*:*
|
|
9.1
|
|
|
2024-11-21 11:36
2015-12-11
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2643
|
-
6.8
|
MEDIUM
|
ImageIO in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a …
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2015-7053
|
cpe:2.3:o:apple:iphone_os:*:*
|
|
9.1
|
|
|
2024-11-21 11:36
2015-12-11
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2644
|
-
9.3
|
HIGH
|
MobileStorageMounter in Apple iOS before 9.2 and tvOS before 9.1 mishandles the timing of trust-cache loading, which allows attackers to execute arbitrary code in a privileged context via a crafted a…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2015-7051
|
cpe:2.3:o:apple:iphone_os:*:*
|
|
9.1
|
|
|
2024-11-21 11:36
2015-12-11
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2645
|
-
4.3
|
MEDIUM
|
WebKit in Apple iOS before 9.2 and Safari before 9.0.2 misparses content extensions, which allows remote attackers to obtain sensitive browsing-history information via a crafted web site.
|
CWE-200
Information Exposure
|
CVE-2015-7050
|
cpe:2.3:o:apple:iphone_os:*:*
|
|
9.1
|
|
|
2024-11-21 11:36
2015-12-11
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2646
|
-
6.8
|
MEDIUM
|
WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2015-7048
|
cpe:2.3:o:apple:iphone_os:*:*
|
|
9.1
|
|
|
2024-11-21 11:36
2015-12-11
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2647
|
-
7.2
|
HIGH
|
The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to gain privileges via a crafted mach message that is misparsed.
|
CWE-20
Improper Input Validation
|
CVE-2015-7047
|
cpe:2.3:o:apple:iphone_os:*:*
|
|
9.1
|
|
|
2024-11-21 11:36
2015-12-11
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2648
|
-
2.6
|
LOW
|
The Sandbox feature in xnu in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 does not properly implement privilege separation, which allows attackers to bypass the…
|
CWE-200
Information Exposure
|
CVE-2015-7046
|
cpe:2.3:o:apple:iphone_os:*:*
|
|
9.1
|
|
|
2024-11-21 11:36
2015-12-11
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2649
|
-
4.3
|
MEDIUM
|
The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to cause a denial of service via a crafted app, a different vulnerability than CVE-20…
|
NVD-CWE-noinfo
|
CVE-2015-7043
|
cpe:2.3:o:apple:iphone_os:*:*
|
|
9.1
|
|
|
2024-11-21 11:36
2015-12-11
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2650
|
-
4.3
|
MEDIUM
|
The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to cause a denial of service via a crafted app, a different vulnerability than CVE-20…
|
NVD-CWE-noinfo
|
CVE-2015-7042
|
cpe:2.3:o:apple:iphone_os:*:*
|
|
9.1
|
|
|
2024-11-21 11:36
2015-12-11
|
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|