Filtered by vendor Apple
Subscribe
Total
10175 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2015-3672 | 1 Apple | 1 Mac Os X | 2017-09-21 | 7.2 HIGH | N/A |
Admin Framework in Apple OS X before 10.10.4 does not properly handle authentication errors, which allows local users to obtain admin privileges via unspecified vectors. | |||||
CVE-2015-3673 | 1 Apple | 1 Mac Os X | 2017-09-21 | 7.2 HIGH | N/A |
Admin Framework in Apple OS X before 10.10.4 does not properly restrict the location of writeconfig clients, which allows local users to obtain root privileges by moving and then modifying Directory Utility. | |||||
CVE-2015-3674 | 1 Apple | 1 Mac Os X | 2017-09-21 | 7.5 HIGH | N/A |
afpserver in Apple OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors. | |||||
CVE-2015-3675 | 1 Apple | 1 Mac Os X | 2017-09-21 | 5.0 MEDIUM | N/A |
The default configuration of the Apache HTTP Server on Apple OS X before 10.10.4 does not enable the mod_hfs_apple module, which allows remote attackers to bypass HTTP authentication via a crafted URL. | |||||
CVE-2015-3676 | 1 Apple | 1 Mac Os X | 2017-09-21 | 4.3 MEDIUM | N/A |
AppleGraphicsControl in Apple OS X before 10.10.4 allows attackers to obtain sensitive memory-layout information via a crafted app. | |||||
CVE-2015-3677 | 1 Apple | 1 Mac Os X | 2017-09-21 | 4.3 MEDIUM | N/A |
The LZVN compression feature in AppleFSCompression in Apple OS X before 10.10.4 allows attackers to obtain sensitive memory-layout information for the kernel via a crafted app. | |||||
CVE-2015-3679 | 1 Apple | 1 Mac Os X | 2017-09-21 | 6.8 MEDIUM | N/A |
Apple Type Services (ATS) in Apple OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-3680, CVE-2015-3681, and CVE-2015-3682. | |||||
CVE-2015-3678 | 1 Apple | 1 Mac Os X | 2017-09-21 | 7.2 HIGH | N/A |
AppleThunderboltEDMService in Apple OS X before 10.10.4 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified Thunderbolt commands. | |||||
CVE-2015-3680 | 1 Apple | 1 Mac Os X | 2017-09-21 | 6.8 MEDIUM | N/A |
Apple Type Services (ATS) in Apple OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-3679, CVE-2015-3681, and CVE-2015-3682. | |||||
CVE-2015-3681 | 1 Apple | 1 Mac Os X | 2017-09-21 | 6.8 MEDIUM | N/A |
Apple Type Services (ATS) in Apple OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-3679, CVE-2015-3680, and CVE-2015-3682. | |||||
CVE-2015-3682 | 1 Apple | 1 Mac Os X | 2017-09-21 | 6.8 MEDIUM | N/A |
Apple Type Services (ATS) in Apple OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-3679, CVE-2015-3680, and CVE-2015-3681. | |||||
CVE-2015-3683 | 1 Apple | 1 Mac Os X | 2017-09-21 | 9.3 HIGH | N/A |
The Bluetooth HCI interface implementation in Apple OS X before 10.10.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. | |||||
CVE-2015-3690 | 1 Apple | 2 Iphone Os, Mac Os X | 2017-09-21 | 4.3 MEDIUM | N/A |
The DiskImages subsystem in Apple iOS before 8.4 and OS X before 10.10.4 allows attackers to obtain sensitive memory-layout information for the kernel via a crafted app. | |||||
CVE-2015-3691 | 1 Apple | 1 Mac Os X | 2017-09-21 | 9.3 HIGH | N/A |
The Monitor Control Command Set kernel extension in the Display Drivers subsystem in Apple OS X before 10.10.4 allows attackers to execute arbitrary code in a privileged context via a crafted app that leverages control of a function pointer. | |||||
CVE-2015-3694 | 1 Apple | 2 Iphone Os, Mac Os X | 2017-09-21 | 6.8 MEDIUM | N/A |
FontParser in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-3719. | |||||
CVE-2015-3695 | 1 Apple | 1 Mac Os X | 2017-09-21 | 7.2 HIGH | N/A |
Buffer overflow in the Intel Graphics Driver in Apple OS X before 10.10.4 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2015-3696, CVE-2015-3697, CVE-2015-3698, CVE-2015-3699, CVE-2015-3700, CVE-2015-3701, and CVE-2015-3702. | |||||
CVE-2015-3696 | 1 Apple | 1 Mac Os X | 2017-09-21 | 7.2 HIGH | N/A |
Buffer overflow in the Intel Graphics Driver in Apple OS X before 10.10.4 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2015-3695, CVE-2015-3697, CVE-2015-3698, CVE-2015-3699, CVE-2015-3700, CVE-2015-3701, and CVE-2015-3702. | |||||
CVE-2015-3697 | 1 Apple | 1 Mac Os X | 2017-09-21 | 7.2 HIGH | N/A |
Buffer overflow in the Intel Graphics Driver in Apple OS X before 10.10.4 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2015-3695, CVE-2015-3696, CVE-2015-3698, CVE-2015-3699, CVE-2015-3700, CVE-2015-3701, and CVE-2015-3702. | |||||
CVE-2015-3698 | 1 Apple | 1 Mac Os X | 2017-09-21 | 7.2 HIGH | N/A |
Buffer overflow in the Intel Graphics Driver in Apple OS X before 10.10.4 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2015-3695, CVE-2015-3696, CVE-2015-3697, CVE-2015-3699, CVE-2015-3700, CVE-2015-3701, and CVE-2015-3702. | |||||
CVE-2015-3699 | 1 Apple | 1 Mac Os X | 2017-09-21 | 7.2 HIGH | N/A |
Buffer overflow in the Intel Graphics Driver in Apple OS X before 10.10.4 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2015-3695, CVE-2015-3696, CVE-2015-3697, CVE-2015-3698, CVE-2015-3700, CVE-2015-3701, and CVE-2015-3702. |