Skip to content
OpenAdvisories

Archive

23 October 2015

Vulnerabilities first published on this day (UTC), newest first.

71 results · Feed

  • Unscored —

    ImageIO in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbit…

  • Unscored —

    ImageIO in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbit…

  • Unscored —
    CVE-2015-5932 Public exploit

    The kernel in Apple OS X before 10.11.1 allows local users to gain privileges by leveraging an unspecified "type confus…

  • Unscored —

    WebKit, as used in Apple Safari before 9.0.1 and iTunes before 12.3.1, allows remote attackers to execute arbitrary cod…

  • Unscored —

    The Accelerate Framework component in Apple iOS before 9.1 and OS X before 10.11.1, when multi-threading is enabled, om…

  • Unscored —

    WebKit, as used in Apple iOS before 9.1, Safari before 9.0.1, and iTunes before 12.3.1, allows remote attackers to exec…

  • Unscored —

    The OpenGL implementation in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary …

  • Unscored —

    ImageIO in Apple OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (me…

  • Unscored —

    The Sandbox subsystem in Apple OS X before 10.11.1 allows local users to gain privileges via vectors involving NVRAM pa…

  • Unscored —

    WebKit, as used in Apple iOS before 9.1, Safari before 9.0.1, and iTunes before 12.3.1, allows remote attackers to exec…

  • Unscored —

    FontParser in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute ar…

  • Unscored —

    Audio in Apple OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memo…

  • Unscored —

    ImageIO in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbit…

  • Unscored —

    FontParser in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute ar…

  • Unscored —

    The CoreGraphics component in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attacke…

  • Unscored —

    The Web Service component in Apple OS X Server before 5.0.15 omits an unspecified HTTP header configuration, which allo…

  • Unscored —

    The Swift implementation in Apple Xcode before 7.1 mishandles type conversion, which has unspecified impact and attack …

  • Unscored —

    The Telephony subsystem in Apple iOS before 9.1 allows attackers to obtain sensitive call-status information via a craf…

  • Unscored —

    CoreText in Apple iOS before 9.1, OS X before 10.11.1, and iTunes before 12.3.1 allows remote attackers to execute arbi…

  • Unscored —

    WebKit, as used in Apple iOS before 9.1, allows remote attackers to execute arbitrary code or cause a denial of service…

  • Unscored —

    Apple Mac EFI before 2015-002, as used in OS X before 10.11.1 and other products, mishandles arguments, which allows at…

  • Unscored —

    Notification Center in Apple iOS before 9.1 mishandles changes to "Show on Lock Screen" settings, which allows physical…

  • Unscored —

    The kernel in Apple iOS before 9.1 allows attackers to cause a denial of service via a crafted app.

  • Unscored —

    CoreText in Apple iOS before 9.1, OS X before 10.11.1, and iTunes before 12.3.1 allows remote attackers to execute arbi…

  • Unscored —

    com.apple.driver.AppleVXD393 in the Graphics Driver subsystem in Apple iOS before 9.1 allows attackers to execute arbit…

  • Unscored —

    The OCSP client in Apple iOS before 9.1 does not check for certificate expiry, which allows remote attackers to spoof a…

  • Unscored —

    GasGauge in Apple iOS before 9.1 allows attackers to execute arbitrary code in a privileged context or cause a denial o…

  • Unscored —

    The X.509 certificate-trust implementation in Apple iOS before 9.1 does not recognize that the kSecRevocationRequirePos…

  • Unscored —

    WebKit, as used in Apple iOS before 9.1, allows remote attackers to execute arbitrary code or cause a denial of service…

  • Unscored —

    CoreText in Apple iOS before 9.1, OS X before 10.11.1, and iTunes before 12.3.1 allows remote attackers to execute arbi…

  • Unscored —

    WebKit, as used in Apple iOS before 9.1, allows remote attackers to execute arbitrary code or cause a denial of service…