Apple

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2015-6992 1Apple 3Iphone Os ItunesMac Os X May 6, 2026 Oct 23, 2015 N/A· v4 N/A· v3 7.5 HIGH· v2 CoreText in Apple iOS before 9.1, OS X before 10.11.1, and iTunes before 12.3.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vuln...Show more CoreText in Apple iOS before 9.1, OS X before 10.11.1, and iTunes before 12.3.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6975 and CVE-2015-7017.Show less
CVE-2015-6986 1Apple 1Iphone Os May 6, 2026 Oct 23, 2015 N/A· v4 N/A· v3 9.3 HIGH· v2 com.apple.driver.AppleVXD393 in the Graphics Driver subsystem in Apple iOS before 9.1 allows attackers to execute arbitrary code via a crafted app that leverages an unspecified "type confusion."
CVE-2015-6982 1Apple 1Iphone Os May 6, 2026 Oct 23, 2015 N/A· v4 N/A· v3 6.8 MEDIUM· v2 WebKit, as used in Apple iOS before 9.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than oth...Show more WebKit, as used in Apple iOS before 9.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-10-21-1.Show less
CVE-2015-6981 1Apple 1Iphone Os May 6, 2026 Oct 23, 2015 N/A· v4 N/A· v3 6.8 MEDIUM· v2 WebKit, as used in Apple iOS before 9.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than oth...Show more WebKit, as used in Apple iOS before 9.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-10-21-1.Show less
CVE-2015-6979 1Apple 2Iphone Os Watchos May 6, 2026 Oct 23, 2015 N/A· v4 N/A· v3 9.3 HIGH· v2 GasGauge in Apple iOS before 9.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVE-2015-6975 1Apple 3Iphone Os ItunesMac Os X May 6, 2026 Oct 23, 2015 N/A· v4 N/A· v3 7.5 HIGH· v2 CoreText in Apple iOS before 9.1, OS X before 10.11.1, and iTunes before 12.3.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vuln...Show more CoreText in Apple iOS before 9.1, OS X before 10.11.1, and iTunes before 12.3.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6992 and CVE-2015-7017.Show less
CVE-2015-7034 1Apple 2Iwork Pages May 6, 2026 Oct 18, 2015 N/A· v4 N/A· v3 6.8 MEDIUM· v2 The Apple iWork application before 2.6 for iOS and Apple Pages before 5.6 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted Pages docume...Show more The Apple iWork application before 2.6 for iOS and Apple Pages before 5.6 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted Pages document.Show less
CVE-2015-7033 1Apple 4Iwork KeynoteNumbers+1 more May 6, 2026 Oct 18, 2015 N/A· v4 N/A· v3 6.8 MEDIUM· v2 The Apple iWork application before 2.6 for iOS, Apple Keynote before 6.6, Apple Pages before 5.6, and Apple Numbers before 3.6 allow remote attackers to execute arbitrary code or cause a denial of service (memory corrupt...Show more The Apple iWork application before 2.6 for iOS, Apple Keynote before 6.6, Apple Pages before 5.6, and Apple Numbers before 3.6 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted document.Show less
CVE-2015-7032 1Apple 4Iwork KeynoteNumbers+1 more May 6, 2026 Oct 18, 2015 N/A· v4 N/A· v3 4.3 MEDIUM· v2 The Apple iWork application before 2.6 for iOS, Apple Keynote before 6.6, Apple Pages before 5.6, and Apple Numbers before 3.6 allow remote attackers to obtain sensitive information via a crafted document.
CVE-2015-7761 1Apple 1Mac Os X May 6, 2026 Oct 9, 2015 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Mail in Apple OS X before 10.11 does not properly recognize user preferences, which allows attackers to obtain sensitive information via an unspecified action during the printing of an e-mail message, a different vulnera...Show more Mail in Apple OS X before 10.11 does not properly recognize user preferences, which allows attackers to obtain sensitive information via an unspecified action during the printing of an e-mail message, a different vulnerability than CVE-2015-7760.Show less
CVE-2015-7760 1Apple 1Mac Os X May 6, 2026 Oct 9, 2015 N/A· v4 N/A· v3 5.0 MEDIUM· v2 libxpc in launchd in Apple OS X before 10.11 does not restrict the creation of processes for network connections, which allows remote attackers to cause a denial of service (resource consumption) by repeatedly connecting...Show more libxpc in launchd in Apple OS X before 10.11 does not restrict the creation of processes for network connections, which allows remote attackers to cause a denial of service (resource consumption) by repeatedly connecting to the SSH port, a different vulnerability than CVE-2015-7761.Show less
CVE-2015-5923 1Apple 1Iphone Os May 6, 2026 Oct 9, 2015 N/A· v4 N/A· v3 2.1 LOW· v2 Apple iOS before 9.0.2 does not properly restrict the options available on the lock screen, which allows physically proximate attackers to read contact data or view photos via unspecified vectors.
CVE-2015-5922 2Apple Icu Project 3International Components For Unicode Mac Os XWatchos May 6, 2026 Oct 9, 2015 N/A· v4 N/A· v3 10.0 HIGH· v2 Unspecified vulnerability in International Components for Unicode (ICU) before 53.1.0, as used in Apple OS X before 10.11 and watchOS before 2, has unknown impact and attack vectors.
CVE-2015-5919 1Apple 1Watch Os May 6, 2026 Oct 9, 2015 N/A· v4 N/A· v3 7.2 HIGH· v2 GasGauge in Apple watchOS before 2 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5918.
CVE-2015-5918 1Apple 1Watch Os May 6, 2026 Oct 9, 2015 N/A· v4 N/A· v3 7.2 HIGH· v2 GasGauge in Apple watchOS before 2 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5919.
CVE-2015-5915 1Apple 1Mac Os X May 6, 2026 Oct 9, 2015 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Apple OS X before 10.11 does not ensure that the keychain's lock state is displayed correctly, which has unspecified impact and attack vectors.
CVE-2015-5914 1Apple 1Mac Os X May 6, 2026 Oct 9, 2015 N/A· v4 N/A· v3 4.7 MEDIUM· v2 The EFI component in Apple OS X before 10.11 allows physically proximate attackers to modify firmware during the EFI update process by inserting an Apple Ethernet Thunderbolt adapter with crafted code in an Option ROM, a...Show more The EFI component in Apple OS X before 10.11 allows physically proximate attackers to modify firmware during the EFI update process by inserting an Apple Ethernet Thunderbolt adapter with crafted code in an Option ROM, aka a "Thunderstrike" issue. NOTE: this issue exists because of an incomplete fix for CVE-2014-4498.Show less
CVE-2015-5913 1Apple 1Mac Os X May 6, 2026 Oct 9, 2015 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Heimdal, as used in Apple OS X before 10.11, allows remote attackers to conduct replay attacks against the SMB server via packet data that represents a Kerberos authenticated request.
CVE-2015-5902 1Apple 1Mac Os X May 6, 2026 Oct 9, 2015 N/A· v4 N/A· v3 4.9 MEDIUM· v2 The debugging feature in the kernel in Apple OS X before 10.11 mismanages state, which allows local users to cause a denial of service via unspecified vectors.
CVE-2015-5901 1Apple 1Mac Os X May 6, 2026 Oct 9, 2015 N/A· v4 N/A· v3 2.1 LOW· v2 The Secure Empty Trash feature in Finder in Apple OS X before 10.11 improperly deletes Trash files, which might allow local users to obtain sensitive information by reading storage media, as demonstrated by reading a fla...Show more The Secure Empty Trash feature in Finder in Apple OS X before 10.11 improperly deletes Trash files, which might allow local users to obtain sensitive information by reading storage media, as demonstrated by reading a flash drive.Show less

Previous 1...301302303...460 Next