← Back

Mac Os X

mac_os_x

Vendor: Apple • 3,210 CVEs

CVEs (3,210)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2015-7109
1Apple
2Iphone Os
Mac Os X
May 6, 2026
Dec 11, 2015
N/A· v4
N/A· v3
9.3 HIGH· v2
IOAcceleratorFamily in Apple OS X before 10.11.2 and tvOS before 9.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVE-2015-7108
1Apple
1Mac Os X
May 6, 2026
Dec 11, 2015
N/A· v4
N/A· v3
7.2 HIGH· v2
The Bluetooth HCI interface in Apple OS X before 10.11.2 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2015-7107
1Apple
2Iphone Os
Mac Os X
May 6, 2026
Dec 11, 2015
N/A· v4
N/A· v3
6.8 MEDIUM· v2
QuickLook in Apple iOS before 9.2 and OS X before 10.11.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted iWork file.
CVE-2015-7106
1Apple
1Mac Os X
May 6, 2026
Dec 11, 2015
N/A· v4
N/A· v3
7.2 HIGH· v2
The Intel Graphics Driver component in Apple OS X before 10.11.2 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2015-7105
1Apple
4Iphone Os
Mac Os XTvos+1 more
May 6, 2026
Dec 11, 2015
N/A· v4
N/A· v3
6.8 MEDIUM· v2
CoreGraphics in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font fil...Show more
CoreGraphics in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file.Show less
CVE-2015-7094
1Apple
2Iphone Os
Mac Os X
May 6, 2026
Dec 11, 2015
N/A· v4
N/A· v3
2.6 LOW· v2
CFNetwork HTTPProtocol in Apple iOS before 9.2 and OS X before 10.11.2 allows man-in-the-middle attackers to bypass the HSTS protection mechanism via a crafted URL.
CVE-2015-7084
1Apple
4Iphone Os
Mac Os XTvos+1 more
May 6, 2026
Dec 11, 2015
N/A· v4
N/A· v3
7.2 HIGH· v2
The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different...Show more
The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7083.Show less
CVE-2015-7083
1Apple
4Iphone Os
Mac Os XTvos+1 more
May 6, 2026
Dec 11, 2015
N/A· v4
N/A· v3
7.2 HIGH· v2
The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different...Show more
The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7084.Show less
CVE-2015-7081
1Apple
2Iphone Os
Mac Os X
May 6, 2026
Dec 11, 2015
N/A· v4
N/A· v3
5.0 MEDIUM· v2
iBooks in Apple iOS before 9.2 and OS X before 10.11.2 allows remote attackers to read arbitrary files via an iBooks file containing an XML external entity declaration in conjunction with an entity reference, related to...Show more
iBooks in Apple iOS before 9.2 and OS X before 10.11.2 allows remote attackers to read arbitrary files via an iBooks file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.Show less
CVE-2015-7078
1Apple
1Mac Os X
May 6, 2026
Dec 11, 2015
N/A· v4
N/A· v3
7.2 HIGH· v2
Use-after-free vulnerability in Hypervisor in Apple OS X before 10.11.2 allows local users to gain privileges via vectors involving VM objects.
CVE-2015-7077
1Apple
1Mac Os X
May 6, 2026
Dec 11, 2015
N/A· v4
N/A· v3
7.2 HIGH· v2
The Intel Graphics Driver component in Apple OS X before 10.11.2 allows local users to gain privileges or cause a denial of service (out-of-bounds memory access) via unspecified vectors.
CVE-2015-7076
1Apple
1Mac Os X
May 6, 2026
Dec 11, 2015
N/A· v4
N/A· v3
7.2 HIGH· v2
The Intel Graphics Driver component in Apple OS X before 10.11.2 allows local users to gain privileges or cause a denial of service (NULL pointer dereference) via unspecified vectors.
CVE-2015-7075
1Apple
4Iphone Os
Mac Os XTvos+1 more
May 6, 2026
Dec 11, 2015
N/A· v4
N/A· v3
6.8 MEDIUM· v2
CoreMedia Playback in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a malformed...Show more
CoreMedia Playback in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a malformed media file.Show less
CVE-2015-7074
1Apple
3Iphone Os
Mac Os XTvos
May 6, 2026
Dec 11, 2015
N/A· v4
N/A· v3
6.8 MEDIUM· v2
CoreMedia Playback in Apple iOS before 9.2, OS X before 10.11.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a malformed media file.
CVE-2015-7073
1Apple
4Iphone Os
Mac Os XTvos+1 more
May 6, 2026
Dec 11, 2015
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted SSL...Show more
Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted SSL handshake.Show less
CVE-2015-7071
1Apple
1Mac Os X
May 6, 2026
Dec 11, 2015
N/A· v4
N/A· v3
10.0 HIGH· v2
The File Bookmark component in Apple OS X before 10.11.2 allows attackers to bypass a sandbox protection mechanism for app scoped bookmarks via a crafted pathname.
CVE-2015-7068
1Apple
4Iphone Os
Mac Os XTvos+1 more
May 6, 2026
Dec 11, 2015
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
IOKit SCSI in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference)...Show more
IOKit SCSI in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference) via an app that provides an unspecified userclient type.Show less
CVE-2015-7067
1Apple
1Mac Os X
May 6, 2026
Dec 11, 2015
N/A· v4
N/A· v3
2.1 LOW· v2
IOThunderboltFamily in Apple OS X before 10.11.2 allows local users to cause a denial of service (NULL pointer dereference) via an unspecified userclient type.
CVE-2015-7066
1Apple
4Iphone Os
Mac Os XTvos+1 more
May 6, 2026
Dec 11, 2015
N/A· v4
N/A· v3
6.8 MEDIUM· v2
OpenGL in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a di...Show more
OpenGL in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2015-7064.Show less
CVE-2015-7065
1Apple
3Iphone Os
Mac Os XTvos
May 6, 2026
Dec 11, 2015
N/A· v4
N/A· v3
6.8 MEDIUM· v2
OpenGL in Apple iOS before 9.2, OS X before 10.11.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.