Skip to content
OpenAdvisories

Archive

11 December 2015

Vulnerabilities first published on this day (UTC), newest first.

72 results · Feed

  • Unscored —

    The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to ca…

  • Unscored —

    The kernel loader in EFI in Apple OS X before 10.11.2 allows local users to gain privileges via a crafted pathname.

  • Unscored —

    MobileStorageMounter in Apple iOS before 9.2 and tvOS before 9.1 mishandles the timing of trust-cache loading, which al…

  • Unscored —

    WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary c…

  • Unscored —

    WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary c…

  • Unscored —

    Siri in Apple iOS before 9.2 allows physically proximate attackers to bypass an intended client-side protection mechani…

  • Unscored —

    Apple OS X before 10.11.2 and tvOS before 9.1 allow local users to bypass intended configuration-profile installation r…

  • Unscored —

    OpenGL in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to…

  • Unscored —
    CVE-2015-7068 Public exploit

    IOKit SCSI in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to ex…

  • Unscored —

    The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to ca…

  • Unscored —

    zlib in the Compression component in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1…

  • Unscored —

    The IOHIDFamily API in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attack…

  • Unscored —

    WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary c…

  • Unscored —

    The ASN.1 decoder in Apple OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to exec…

  • Unscored —

    dyld in Apple iOS before 9.2, tvOS before 9.1, and watchOS before 2.1 mishandles segment validation, which allows attac…

  • Unscored —

    OpenGL in Apple iOS before 9.2, OS X before 10.11.2, and tvOS before 9.1 allows remote attackers to execute arbitrary c…

  • Unscored —
    CVE-2015-7803 EPSS 10%

    The phar_get_entry_data function in ext/phar/util.c in PHP before 5.5.30 and 5.6.x before 5.6.14 allows remote attacker…

  • Unscored —
    CVE-2015-7083 Public exploit

    The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to …

  • Unscored —

    Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allow remote attackers to execute ar…

  • Unscored —

    The Intel Graphics Driver component in Apple OS X before 10.11.2 allows local users to gain privileges or cause a denia…

  • Unscored —

    The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to ca…

  • Unscored —
    CVE-2015-7039 Public exploit EPSS 11%

    Buffer overflow in libc in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows re…

  • Unscored —

    OpenGL in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to…

  • Unscored —
    CVE-2015-7077 Public exploit

    The Intel Graphics Driver component in Apple OS X before 10.11.2 allows local users to gain privileges or cause a denia…

  • Unscored —

    The LaunchServices component in Apple iOS before 9.2 and watchOS before 2.1 allows attackers to execute arbitrary code …

  • Unscored —

    iBooks in Apple iOS before 9.2 and OS X before 10.11.2 allows remote attackers to read arbitrary files via an iBooks fi…

  • Unscored —

    WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary c…

  • Unscored —
    CVE-2015-7084 Public exploit

    The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to …

  • Unscored —
    CVE-2015-7108 Public exploit

    The Bluetooth HCI interface in Apple OS X before 10.11.2 allows local users to gain privileges or cause a denial of ser…

  • Unscored —

    Off-by-one error in the phar_parse_zipfile function in ext/phar/zip.c in PHP before 5.5.30 and 5.6.x before 5.6.14 allo…

  • Unscored —

    The ASN.1 decoder in Apple OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to exec…

  • Unscored —

    CoreMedia Playback in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote …