Skip to content
OpenAdvisories

Archive

December 2015

Vulnerabilities first published in this month (UTC), newest first.

565 results · Feed

  • Unscored —
    CVE-2015-7110 Public exploit

    The Disk Images component in Apple OS X before 10.11.2 and tvOS before 9.1 allows local users to gain privileges or cau…

  • Unscored —

    WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary c…

  • Unscored —

    CoreGraphics in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attack…

  • Unscored —

    Safari in Apple iOS before 9.2 allows remote attackers to spoof a URL in the user interface via a crafted web site.

  • Unscored —

    QuickLook in Apple iOS before 9.2 and OS X before 10.11.2 allows remote attackers to execute arbitrary code or cause a …

  • Unscored —

    Multiple unspecified vulnerabilities in Git before 2.5.4, as used in Apple Xcode before 7.2, have unknown impact and at…

  • Unscored —
    CVE-2015-7106 Public exploit

    The Intel Graphics Driver component in Apple OS X before 10.11.2 allows local users to gain privileges or cause a denia…

  • Unscored —

    IOThunderboltFamily in Apple OS X before 10.11.2 allows local users to cause a denial of service (NULL pointer derefere…

  • Unscored —

    ImageIO in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers t…

  • Unscored —

    AppleMobileFileIntegrity in Apple iOS before 9.2 and tvOS before 9.1 does not prevent changes to access-control structu…

  • Unscored —

    The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to ca…

  • Unscored —

    The kernel loader in EFI in Apple OS X before 10.11.2 allows local users to gain privileges via a crafted pathname.

  • Unscored —

    MobileStorageMounter in Apple iOS before 9.2 and tvOS before 9.1 mishandles the timing of trust-cache loading, which al…

  • Unscored —

    WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary c…

  • Unscored —

    WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary c…

  • Unscored —

    Siri in Apple iOS before 9.2 allows physically proximate attackers to bypass an intended client-side protection mechani…

  • Unscored —

    Apple OS X before 10.11.2 and tvOS before 9.1 allow local users to bypass intended configuration-profile installation r…

  • Unscored —

    OpenGL in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to…

  • Unscored —
    CVE-2015-7068 Public exploit

    IOKit SCSI in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to ex…

  • Unscored —

    The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to ca…

  • Unscored —

    zlib in the Compression component in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1…

  • Unscored —

    The IOHIDFamily API in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attack…

  • Unscored —

    WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary c…

  • Unscored —

    The ASN.1 decoder in Apple OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to exec…

  • Unscored —

    dyld in Apple iOS before 9.2, tvOS before 9.1, and watchOS before 2.1 mishandles segment validation, which allows attac…

  • Unscored —

    OpenGL in Apple iOS before 9.2, OS X before 10.11.2, and tvOS before 9.1 allows remote attackers to execute arbitrary c…

  • Unscored —
    CVE-2015-7803 EPSS 10%

    The phar_get_entry_data function in ext/phar/util.c in PHP before 5.5.30 and 5.6.x before 5.6.14 allows remote attacker…

  • Unscored —
    CVE-2015-7083 Public exploit

    The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to …

  • Unscored —

    Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allow remote attackers to execute ar…

  • Unscored —

    The Intel Graphics Driver component in Apple OS X before 10.11.2 allows local users to gain privileges or cause a denia…

  • Unscored —

    The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to ca…

  • Unscored —
    CVE-2015-7039 Public exploit EPSS 11%

    Buffer overflow in libc in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows re…

  • Unscored —

    OpenGL in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to…

  • Unscored —
    CVE-2015-7077 Public exploit

    The Intel Graphics Driver component in Apple OS X before 10.11.2 allows local users to gain privileges or cause a denia…

  • Unscored —

    The LaunchServices component in Apple iOS before 9.2 and watchOS before 2.1 allows attackers to execute arbitrary code …

  • Unscored —

    iBooks in Apple iOS before 9.2 and OS X before 10.11.2 allows remote attackers to read arbitrary files via an iBooks fi…

  • Unscored —

    WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary c…

  • Unscored —
    CVE-2015-7084 Public exploit

    The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to …

  • Unscored —
    CVE-2015-7108 Public exploit

    The Bluetooth HCI interface in Apple OS X before 10.11.2 allows local users to gain privileges or cause a denial of ser…

  • Unscored —

    Off-by-one error in the phar_parse_zipfile function in ext/phar/zip.c in PHP before 5.5.30 and 5.6.x before 5.6.14 allo…