CVSS: 4.6EPSS: 0%CPEs: 2EXPL: 0CVE-2015-7062
https://notcve.org/view.php?id=CVE-2015-7062
Apple OS X before 10.11.2 and tvOS before 9.1 allow local users to bypass intended configuration-profile installation restrictions via unspecified vectors. Apple OS X en versiones anteriores a 10.11.2 y tvOS en versiones anteriores a 9.1 permite a usuarios locales eludir las restricciones de instalación destinadas a la configuración de perfil a través de vectores no especificados. • http://lists.apple.com/archives/security-announce/2015/Dec/msg00001.html http://lists.apple.com/archives/security-announce/2015/Dec/msg00005.html http://www.securitytracker.com/id/1034344 https://support.apple.com/HT205637 https://support.apple.com/HT205640 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 7.2EPSS: 0%CPEs: 1EXPL: 0CVE-2015-7063
https://notcve.org/view.php?id=CVE-2015-7063
The kernel loader in EFI in Apple OS X before 10.11.2 allows local users to gain privileges via a crafted pathname. El cargador del kernel en EFI en Apple OS X en versiones anteriores a 10.11.2 permite a usuarios locales obtener privilegios a través de un nombre de ruta manipulado. • http://lists.apple.com/archives/security-announce/2015/Dec/msg00005.html http://www.securitytracker.com/id/1034344 https://support.apple.com/HT205637 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 5.0EPSS: 0%CPEs: 2EXPL: 0CVE-2015-7045
https://notcve.org/view.php?id=CVE-2015-7045
Keychain Access in Apple OS X before 10.11.2 and tvOS before 9.1 improperly interacts with Keychain Agent, which allows attackers to spoof the Keychain Server via unspecified vectors. Keychain Access en Apple OS X en versiones anteriores a 10.11.2 y tvOS en versiones anteriores a 9.1 interactúa indebidamente con Keychain Agent, lo que permite a atacantes suplantar el Keychain Server a través de vectores no especificados. • http://lists.apple.com/archives/security-announce/2015/Dec/msg00001.html http://lists.apple.com/archives/security-announce/2015/Dec/msg00005.html http://www.securitytracker.com/id/1034344 https://support.apple.com/HT205637 https://support.apple.com/HT205640 • CWE-17: DEPRECATED: Code •
CVSS: 6.8EPSS: 2%CPEs: 3EXPL: 0CVE-2015-7061
https://notcve.org/view.php?id=CVE-2015-7061
The ASN.1 decoder in Apple OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted certificate, a different vulnerability than CVE-2015-7059 and CVE-2015-7060. El decodificador ASN.1 en Apple OS X en versiones anteriores a 10.11.2, tvOS en versiones anteriores a 9.1 y watchOS en versiones anteriores a 2.1 permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria) a través de un certificado manipulado, una vulnerabilidad diferente a CVE-2015-7059 y CVE-2015-7060. • http://lists.apple.com/archives/security-announce/2015/Dec/msg00001.html http://lists.apple.com/archives/security-announce/2015/Dec/msg00002.html http://lists.apple.com/archives/security-announce/2015/Dec/msg00005.html http://www.securitytracker.com/id/1034344 https://support.apple.com/HT205637 https://support.apple.com/HT205640 https://support.apple.com/HT205641 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.6EPSS: 0%CPEs: 1EXPL: 0CVE-2015-7044
https://notcve.org/view.php?id=CVE-2015-7044
The System Integrity Protection feature in Apple OS X before 10.11.2 mishandles union mounts, which allows attackers to execute arbitrary code in a privileged context via a crafted app with root privileges. La funcionalidad System Integrity Protection en Apple OS X en versiones anteriores a 10.11.2 no maneja correctamente los montajes de unión, lo que permite a atacantes ejecutar código arbitrario en un contexto privilegiado a través de una aplicación manipulada con privilegios de root. • http://lists.apple.com/archives/security-announce/2015/Dec/msg00005.html http://www.securitytracker.com/id/1034344 https://support.apple.com/HT205637 • CWE-254: 7PK - Security Features •