CVSS: 9.8EPSS: 0%CPEs: 4EXPL: 0CVE-2015-7046 – Apple Security Advisory 2015-12-08-1
https://notcve.org/view.php?id=CVE-2015-7046
10 Dec 2015 — The Sandbox feature in xnu in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 does not properly implement privilege separation, which allows attackers to bypass the ASLR protection mechanism via a crafted app with root privileges. La funcionalidad Sandbox en xnu en Apple iOS en versiones anteriores a 9.2, OS X en versiones anteriores a 10.11.2, tvOS en versiones anteriores a 9.1 y watchOS en versiones anteriores a 2.1 no implementa correctamente la separación de privilegio... • http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 8.8EPSS: 1%CPEs: 3EXPL: 0CVE-2015-7065 – Apple Security Advisory 2015-12-08-1
https://notcve.org/view.php?id=CVE-2015-7065
10 Dec 2015 — OpenGL in Apple iOS before 9.2, OS X before 10.11.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. OpenGL en Apple iOS en versiones anteriores a 9.2, OS X en versiones anteriores a 10.11.2 y tvOS en versiones anteriores a 9.1 permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria) a través de un sitio web manipulado. OS X El Capitan 10.11.2 and Securit... • http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 8.8EPSS: 0%CPEs: 3EXPL: 0CVE-2015-7095 – Apple Security Advisory 2015-12-08-1
https://notcve.org/view.php?id=CVE-2015-7095
10 Dec 2015 — WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2015-7048, CVE-2015-7096, CVE-2015-7097, CVE-2015-7098, CVE-2015-7099, CVE-2015-7100, CVE-2015-7101, CVE-2015-7102, and CVE-2015-7103. WebKit en Apple iOS en versiones anteriores a 9.2, Safari en versiones anteriores a 9.0.2 y tvOS en versiones anteriores a 9... • http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.8EPSS: 0%CPEs: 4EXPL: 0CVE-2015-7001 – Apple Security Advisory 2015-12-08-1
https://notcve.org/view.php?id=CVE-2015-7001
10 Dec 2015 — AppSandbox in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 mishandles hard links, which allows attackers to bypass Contacts access revocation via a crafted app. AppSandbox en Apple iOS en versiones anteriores a 9.2, OS X en versiones anteriores a 10.11.2, tvOS en versiones anteriores a 9.1 y watchOS en versiones anteriores a 2.1 no maneja correctamente enlaces duros, lo que permite a atacantes eludir la revocación de acceso a Contacts a través de una aplicación manipula... • http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 8.8EPSS: 2%CPEs: 4EXPL: 0CVE-2015-7073 – Apple Security Advisory 2015-12-08-1
https://notcve.org/view.php?id=CVE-2015-7073
10 Dec 2015 — Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted SSL handshake. Apple iOS en versiones anteriores a 9.2, OS X en versiones anteriores a 10.11.2, tvOS en versiones anteriores a 9.1 y watchOS en versiones anteriores a 2.1 permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria y caída ... • http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 8.8EPSS: 0%CPEs: 4EXPL: 0CVE-2015-7054 – Apple Security Advisory 2015-12-08-1
https://notcve.org/view.php?id=CVE-2015-7054
10 Dec 2015 — zlib in the Compression component in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 does not initialize memory for an unspecified data structure, which allows remote attackers to execute arbitrary code via a crafted web site. zlib en el componente Compression en Apple iOS en versiones anteriores a 9.2, OS X en versiones anteriores a 10.11.2, tvOS en versiones anteriores a 9.1 y watchOS en versiones anteriores a 2.1 no inicializa la memoria para una estructura de datos no ... • http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html • CWE-19: Data Processing Errors •
CVSS: 8.8EPSS: 0%CPEs: 3EXPL: 0CVE-2015-7101 – Apple Security Advisory 2015-12-08-1
https://notcve.org/view.php?id=CVE-2015-7101
10 Dec 2015 — WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2015-7048, CVE-2015-7095, CVE-2015-7096, CVE-2015-7097, CVE-2015-7098, CVE-2015-7099, CVE-2015-7100, CVE-2015-7102, and CVE-2015-7103. WebKit en Apple iOS en versiones anteriores a 9.2, Safari en versiones anteriores a 9.0.2 y tvOS en versiones anteriores a 9... • http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 8.8EPSS: 0%CPEs: 3EXPL: 0CVE-2015-7048 – Apple Security Advisory 2015-12-08-1
https://notcve.org/view.php?id=CVE-2015-7048
10 Dec 2015 — WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2015-7095, CVE-2015-7096, CVE-2015-7097, CVE-2015-7098, CVE-2015-7099, CVE-2015-7100, CVE-2015-7101, CVE-2015-7102, and CVE-2015-7103. WebKit en Apple iOS en versiones anteriores a 9.2, Safari en versiones anteriores a 9.0.2 y tvOS en versiones anteriores a 9... • http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 8.8EPSS: 0%CPEs: 4EXPL: 0CVE-2015-7066 – Apple Security Advisory 2015-12-08-1
https://notcve.org/view.php?id=CVE-2015-7066
10 Dec 2015 — OpenGL in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2015-7064. OpenGL en Apple iOS en versiones anteriores a 9.2, OS X en versiones anteriores a 10.11.2, tvOS en versiones anteriores a 9.1 y watchOS en versiones anteriores a 2.1 permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de ... • http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 8.8EPSS: 0%CPEs: 3EXPL: 0CVE-2015-7102 – Apple Security Advisory 2015-12-08-1
https://notcve.org/view.php?id=CVE-2015-7102
10 Dec 2015 — WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2015-7048, CVE-2015-7095, CVE-2015-7096, CVE-2015-7097, CVE-2015-7098, CVE-2015-7099, CVE-2015-7100, CVE-2015-7101, and CVE-2015-7103. WebKit en Apple iOS en versiones anteriores a 9.2, Safari en versiones anteriores a 9.0.2 y tvOS en versiones anteriores a 9... • http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •