Apple

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2015-1103 1Apple 3Iphone Os Mac Os XTvos May 6, 2026 Apr 10, 2015 N/A· v4 N/A· v3 7.5 HIGH· v2 The kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 makes routing changes in response to ICMP_REDIRECT messages, which allows remote attackers to cause a denial of service (network outa...Show more The kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 makes routing changes in response to ICMP_REDIRECT messages, which allows remote attackers to cause a denial of service (network outage) or obtain sensitive packet-content information via a crafted ICMP packet.Show less
CVE-2015-1102 1Apple 3Iphone Os Mac Os XTvos May 6, 2026 Apr 10, 2015 N/A· v4 N/A· v3 7.1 HIGH· v2 The kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 does not properly handle TCP headers, which allows man-in-the-middle attackers to cause a denial of service via unspecified vectors.
CVE-2015-1101 1Apple 3Iphone Os Mac Os XTvos May 6, 2026 Apr 10, 2015 N/A· v4 N/A· v3 6.9 MEDIUM· v2 The kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app...Show more The kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.Show less
CVE-2015-1100 1Apple 3Iphone Os Mac Os XTvos May 6, 2026 Apr 10, 2015 N/A· v4 N/A· v3 5.4 MEDIUM· v2 The kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 allows attackers to cause a denial of service (out-of-bounds memory access) or obtain sensitive memory-content information via a craf...Show more The kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 allows attackers to cause a denial of service (out-of-bounds memory access) or obtain sensitive memory-content information via a crafted app.Show less
CVE-2015-1099 1Apple 3Iphone Os Mac Os XTvos May 6, 2026 Apr 10, 2015 N/A· v4 N/A· v3 4.0 MEDIUM· v2 Race condition in the setreuid system-call implementation in the kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 allows attackers to cause a denial of service via a crafted app.
CVE-2015-1098 1Apple 2Iphone Os Mac Os X May 6, 2026 Apr 10, 2015 N/A· v4 7.3 HIGH· v3 6.8 MEDIUM· v2 iWork in Apple iOS before 8.3 and Apple OS X before 10.10.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted iWork file.
CVE-2015-1097 1Apple 2Iphone Os Tvos May 6, 2026 Apr 10, 2015 N/A· v4 N/A· v3 1.9 LOW· v2 IOMobileFramebuffer in Apple iOS before 8.3 and Apple TV before 7.2 allows attackers to obtain sensitive information about kernel memory via a crafted app.
CVE-2015-1096 1Apple 3Iphone Os Mac Os XTvos May 6, 2026 Apr 10, 2015 N/A· v4 N/A· v3 1.9 LOW· v2 IOHIDFamily in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 allows attackers to obtain sensitive information about kernel memory via a crafted app.
CVE-2015-1095 1Apple 3Iphone Os Mac Os XTvos May 6, 2026 Apr 10, 2015 N/A· v4 N/A· v3 7.2 HIGH· v2 IOHIDFamily in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 allows physically proximate attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted HID d...Show more IOHIDFamily in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 allows physically proximate attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted HID device.Show less
CVE-2015-1094 1Apple 2Iphone Os Tvos May 6, 2026 Apr 10, 2015 N/A· v4 N/A· v3 1.9 LOW· v2 IOAcceleratorFamily in Apple iOS before 8.3 and Apple TV before 7.2 allows attackers to obtain sensitive information about kernel memory via a crafted app.
CVE-2015-1093 1Apple 2Iphone Os Mac Os X May 6, 2026 Apr 10, 2015 N/A· v4 N/A· v3 6.8 MEDIUM· v2 FontParser in Apple iOS before 8.3 and Apple OS X before 10.10.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file.
CVE-2015-1092 1Apple 2Iphone Os Tvos May 6, 2026 Apr 10, 2015 N/A· v4 N/A· v3 5.0 MEDIUM· v2 NSXMLParser in Foundation in Apple iOS before 8.3 and Apple TV before 7.2 allows remote attackers to read arbitrary files via an external entity declaration in conjunction with an entity reference, related to an XML Exte...Show more NSXMLParser in Foundation in Apple iOS before 8.3 and Apple TV before 7.2 allows remote attackers to read arbitrary files via an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.Show less
CVE-2015-1091 1Apple 2Iphone Os Mac Os X May 6, 2026 Apr 10, 2015 N/A· v4 N/A· v3 4.3 MEDIUM· v2 The CFNetwork Session component in Apple iOS before 8.3 and Apple OS X before 10.10.3 does not properly handle request headers during processing of redirects in HTTP responses, which allows remote attackers to bypass the...Show more The CFNetwork Session component in Apple iOS before 8.3 and Apple OS X before 10.10.3 does not properly handle request headers during processing of redirects in HTTP responses, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.Show less
CVE-2015-1090 1Apple 1Iphone Os May 6, 2026 Apr 10, 2015 N/A· v4 N/A· v3 5.0 MEDIUM· v2 CFNetwork in Apple iOS before 8.3 does not delete HTTP Strict Transport Security (HSTS) state information in response to a Safari history-clearing action, which allows attackers to obtain sensitive information by reading...Show more CFNetwork in Apple iOS before 8.3 does not delete HTTP Strict Transport Security (HSTS) state information in response to a Safari history-clearing action, which allows attackers to obtain sensitive information by reading a history file.Show less
CVE-2015-1089 1Apple 2Iphone Os Mac Os X May 6, 2026 Apr 10, 2015 N/A· v4 N/A· v3 5.0 MEDIUM· v2 CFNetwork in Apple iOS before 8.3 and Apple OS X before 10.10.3 does not properly handle cookies during processing of redirects in HTTP responses, which allows remote attackers to bypass the Same Origin Policy via a craf...Show more CFNetwork in Apple iOS before 8.3 and Apple OS X before 10.10.3 does not properly handle cookies during processing of redirects in HTTP responses, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.Show less
CVE-2015-1088 1Apple 2Iphone Os Mac Os X May 6, 2026 Apr 10, 2015 N/A· v4 N/A· v3 6.8 MEDIUM· v2 CFURL in Apple iOS before 8.3 and Apple OS X before 10.10.3 does not properly validate URLs, which allows remote attackers to execute arbitrary code via a crafted web site.
CVE-2015-1087 1Apple 1Iphone Os May 6, 2026 Apr 10, 2015 N/A· v4 N/A· v3 2.1 LOW· v2 Directory traversal vulnerability in Backup in Apple iOS before 8.3 allows attackers to read arbitrary files via a crafted relative path.
CVE-2015-1086 1Apple 2Iphone Os Tvos May 6, 2026 Apr 10, 2015 N/A· v4 N/A· v3 6.9 MEDIUM· v2 The Audio Drivers subsystem in Apple iOS before 8.3 and Apple TV before 7.2 does not properly validate IOKit object metadata, which allows attackers to execute arbitrary code in a privileged context via a crafted app.
CVE-2015-1085 1Apple 1Iphone Os May 6, 2026 Apr 10, 2015 N/A· v4 N/A· v3 1.9 LOW· v2 AppleKeyStore in Apple iOS before 8.3 does not properly restrict a certain passcode-confirmation interface, which makes it easier for attackers to verify correct passcode guesses via a crafted app.
CVE-2015-0251 5Apache AppleOpensuse+2 more 9Enterprise Linux Desktop Enterprise Linux Hpc NodeEnterprise Linux Server+6 more May 6, 2026 Apr 8, 2015 N/A· v4 N/A· v3 4.0 MEDIUM· v2 The mod_dav_svn server in Subversion 1.5.0 through 1.7.19 and 1.8.0 through 1.8.11 allows remote authenticated users to spoof the svn:author property via a crafted v1 HTTP protocol request sequences.

Previous 1...307308309...443 Next