deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2015-7058
Published: 2015-12-11
Description: Apple iOS before 9.2, OS X before 10.11.2, and tvOS before 9.1 improperly validate keychain item ACLs, which allows attackers to obtain access to keychain items via a crafted app.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html; http://lists.apple.com/archives/security-announce/2015/Dec/msg00001.html; http://lists.apple.com/archives/security-announce/2015/Dec/msg00005.html
CVE: CVE-2015-7059
Published: 2015-12-11
Description: The ASN.1 decoder in Apple OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted certificate, a different vulnerability than CVE-2015-7060 and CVE-2015-7061.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Dec/msg00001.html; http://lists.apple.com/archives/security-announce/2015/Dec/msg00002.html; http://lists.apple.com/archives/security-announce/2015/Dec/msg00005.html
CVE: CVE-2015-7060
Published: 2015-12-11
Description: The ASN.1 decoder in Apple OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted certificate, a different vulnerability than CVE-2015-7059 and CVE-2015-7061.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Dec/msg00001.html; http://lists.apple.com/archives/security-announce/2015/Dec/msg00002.html; http://lists.apple.com/archives/security-announce/2015/Dec/msg00005.html
CVE: CVE-2015-7061
Published: 2015-12-11
Description: The ASN.1 decoder in Apple OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted certificate, a different vulnerability than CVE-2015-7059 and CVE-2015-7060.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Dec/msg00001.html; http://lists.apple.com/archives/security-announce/2015/Dec/msg00002.html; http://lists.apple.com/archives/security-announce/2015/Dec/msg00005.html
CVE: CVE-2015-7062
Published: 2015-12-11
Description: Apple OS X before 10.11.2 and tvOS before 9.1 allow local users to bypass intended configuration-profile installation restrictions via unspecified vectors.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-264
References: http://lists.apple.com/archives/security-announce/2015/Dec/msg00001.html; http://lists.apple.com/archives/security-announce/2015/Dec/msg00005.html; http://www.securitytracker.com/id/1034344
CVE: CVE-2015-7063
Published: 2015-12-11
Description: The kernel loader in EFI in Apple OS X before 10.11.2 allows local users to gain privileges via a crafted pathname.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://lists.apple.com/archives/security-announce/2015/Dec/msg00005.html; http://www.securitytracker.com/id/1034344; https://support.apple.com/HT205637
CVE: CVE-2015-7064
Published: 2015-12-11
Description: OpenGL in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2015-7066.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html; http://lists.apple.com/archives/security-announce/2015/Dec/msg00001.html; http://lists.apple.com/archives/security-announce/2015/Dec/msg00002.html
CVE: CVE-2015-7065
Published: 2015-12-11
Description: OpenGL in Apple iOS before 9.2, OS X before 10.11.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html; http://lists.apple.com/archives/security-announce/2015/Dec/msg00001.html; http://lists.apple.com/archives/security-announce/2015/Dec/msg00005.html
CVE: CVE-2015-7066
Published: 2015-12-11
Description: OpenGL in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2015-7064.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html; http://lists.apple.com/archives/security-announce/2015/Dec/msg00001.html; http://lists.apple.com/archives/security-announce/2015/Dec/msg00002.html
CVE: CVE-2015-7067
Published: 2015-12-11
Description: IOThunderboltFamily in Apple OS X before 10.11.2 allows local users to cause a denial of service (NULL pointer dereference) via an unspecified userclient type.
CVSS Score: 2.1 (LOW)
References: http://lists.apple.com/archives/security-announce/2015/Dec/msg00005.html; http://www.securitytracker.com/id/1034344; https://support.apple.com/HT205637
CVE: CVE-2015-7068
Published: 2015-12-11
Description: IOKit SCSI in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference) via an app that provides an unspecified userclient type.
CVSS Score: 7.8 (HIGH)
CWE: CWE-476
References: http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html; http://lists.apple.com/archives/security-announce/2015/Dec/msg00001.html; http://lists.apple.com/archives/security-announce/2015/Dec/msg00002.html
CVE: CVE-2015-7069
Published: 2015-12-11
Description: Mobile Replayer in GPUTools Framework in Apple iOS before 9.2 allows attackers to execute arbitrary code in a privileged context via an app that provides a crafted pathname, a different vulnerability than CVE-2015-7070.
CVSS Score: 9.3 (HIGH)
References: http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html; http://www.securitytracker.com/id/1034348; https://support.apple.com/HT205635
CVE: CVE-2015-7070
Published: 2015-12-11
Description: Mobile Replayer in GPUTools Framework in Apple iOS before 9.2 allows attackers to execute arbitrary code in a privileged context via an app that provides a crafted pathname, a different vulnerability than CVE-2015-7069.
CVSS Score: 9.3 (HIGH)
References: http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html; http://www.securitytracker.com/id/1034348; https://support.apple.com/HT205635
CVE: CVE-2015-7071
Published: 2015-12-11
Description: The File Bookmark component in Apple OS X before 10.11.2 allows attackers to bypass a sandbox protection mechanism for app scoped bookmarks via a crafted pathname.
CVSS Score: 10.0 (HIGH)
CWE: CWE-264
References: http://lists.apple.com/archives/security-announce/2015/Dec/msg00005.html; http://www.securitytracker.com/id/1034344; https://support.apple.com/HT205637
CVE: CVE-2015-7072
Published: 2015-12-11
Description: dyld in Apple iOS before 9.2, tvOS before 9.1, and watchOS before 2.1 mishandles segment validation, which allows attackers to execute arbitrary code in a privileged context via a crafted app.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html; http://lists.apple.com/archives/security-announce/2015/Dec/msg00001.html; http://lists.apple.com/archives/security-announce/2015/Dec/msg00002.html
CVE: CVE-2015-7073
Published: 2015-12-11
Description: Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted SSL handshake.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html; http://lists.apple.com/archives/security-announce/2015/Dec/msg00001.html; http://lists.apple.com/archives/security-announce/2015/Dec/msg00002.html
CVE: CVE-2015-7074
Published: 2015-12-11
Description: CoreMedia Playback in Apple iOS before 9.2, OS X before 10.11.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a malformed media file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html; http://lists.apple.com/archives/security-announce/2015/Dec/msg00001.html; http://lists.apple.com/archives/security-announce/2015/Dec/msg00005.html
CVE: CVE-2015-7075
Published: 2015-12-11
Description: CoreMedia Playback in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a malformed media file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html; http://lists.apple.com/archives/security-announce/2015/Dec/msg00001.html; http://lists.apple.com/archives/security-announce/2015/Dec/msg00002.html
CVE: CVE-2015-7076
Published: 2015-12-11
Description: The Intel Graphics Driver component in Apple OS X before 10.11.2 allows local users to gain privileges or cause a denial of service (NULL pointer dereference) via unspecified vectors.
CVSS Score: 7.2 (HIGH)
References: http://lists.apple.com/archives/security-announce/2015/Dec/msg00005.html; http://www.securitytracker.com/id/1034344; https://support.apple.com/HT205637
CVE: CVE-2015-7077
Published: 2015-12-11
Description: The Intel Graphics Driver component in Apple OS X before 10.11.2 allows local users to gain privileges or cause a denial of service (out-of-bounds memory access) via unspecified vectors.
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Dec/msg00005.html; http://www.securitytracker.com/id/1034344; https://support.apple.com/HT205637
CVE: CVE-2015-7078
Published: 2015-12-11
Description: Use-after-free vulnerability in Hypervisor in Apple OS X before 10.11.2 allows local users to gain privileges via vectors involving VM objects.
CVSS Score: 7.2 (HIGH)
References: http://lists.apple.com/archives/security-announce/2015/Dec/msg00005.html; http://www.securitytracker.com/id/1034344; https://support.apple.com/HT205637
CVE: CVE-2015-7079
Published: 2015-12-11
Description: dyld in Apple iOS before 9.2 and tvOS before 9.1 mishandles segment validation, which allows attackers to execute arbitrary code in a privileged context via a crafted app.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html; http://lists.apple.com/archives/security-announce/2015/Dec/msg00001.html; http://www.securitytracker.com/id/1034348
CVE: CVE-2015-7080
Published: 2015-12-11
Description: Siri in Apple iOS before 9.2 allows physically proximate attackers to bypass an intended client-side protection mechanism and obtain sensitive content-notification information by listening to a device in the lock-screen state.
CVSS Score: 2.1 (LOW)
CWE: CWE-200
References: http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html; http://www.securitytracker.com/id/1034348; https://support.apple.com/HT205635
CVE: CVE-2015-7081
Published: 2015-12-11
Description: iBooks in Apple iOS before 9.2 and OS X before 10.11.2 allows remote attackers to read arbitrary files via an iBooks file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html; http://lists.apple.com/archives/security-announce/2015/Dec/msg00005.html; http://www.securitytracker.com/id/1034344
CVE: CVE-2015-7082
Published: 2015-12-11
Description: Multiple unspecified vulnerabilities in Git before 2.5.4, as used in Apple Xcode before 7.2, have unknown impact and attack vectors.  NOTE: this CVE is associated only with Xcode use cases.
CVSS Score: 10.0 (HIGH)
References: http://lists.apple.com/archives/security-announce/2015/Dec/msg00004.html; http://www.securitytracker.com/id/1034340; https://github.com/git/git/blob/master/Documentation/RelNotes/2.5.4.txt
CVE: CVE-2015-7083
Published: 2015-12-11
Description: The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7084.
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html; http://lists.apple.com/archives/security-announce/2015/Dec/msg00001.html; http://lists.apple.com/archives/security-announce/2015/Dec/msg00002.html
CVE: CVE-2015-7084
Published: 2015-12-11
Description: The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7083.
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html; http://lists.apple.com/archives/security-announce/2015/Dec/msg00001.html; http://lists.apple.com/archives/security-announce/2015/Dec/msg00002.html
CVE: CVE-2015-7093
Published: 2015-12-11
Description: Safari in Apple iOS before 9.2 allows remote attackers to spoof a URL in the user interface via a crafted web site.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html; http://www.securitytracker.com/id/1034348; https://support.apple.com/HT205635
CVE: CVE-2015-7094
Published: 2015-12-11
Description: CFNetwork HTTPProtocol in Apple iOS before 9.2 and OS X before 10.11.2 allows man-in-the-middle attackers to bypass the HSTS protection mechanism via a crafted URL.
CVSS Score: 2.6 (LOW)
CWE: CWE-20
References: http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html; http://lists.apple.com/archives/security-announce/2015/Dec/msg00005.html; http://www.securitytracker.com/id/1034344
CVE: CVE-2015-7095
Published: 2015-12-11
Description: WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2015-7048, CVE-2015-7096, CVE-2015-7097, CVE-2015-7098, CVE-2015-7099, CVE-2015-7100, CVE-2015-7101, CVE-2015-7102, and CVE-2015-7103.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html; http://lists.apple.com/archives/security-announce/2015/Dec/msg00001.html; http://lists.apple.com/archives/security-announce/2015/Dec/msg00003.html
CVE: CVE-2015-7096
Published: 2015-12-11
Description: WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2015-7048, CVE-2015-7095, CVE-2015-7097, CVE-2015-7098, CVE-2015-7099, CVE-2015-7100, CVE-2015-7101, CVE-2015-7102, and CVE-2015-7103.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html; http://lists.apple.com/archives/security-announce/2015/Dec/msg00001.html; http://lists.apple.com/archives/security-announce/2015/Dec/msg00003.html
CVE: CVE-2015-7097
Published: 2015-12-11
Description: WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2015-7048, CVE-2015-7095, CVE-2015-7096, CVE-2015-7098, CVE-2015-7099, CVE-2015-7100, CVE-2015-7101, CVE-2015-7102, and CVE-2015-7103.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html; http://lists.apple.com/archives/security-announce/2015/Dec/msg00001.html; http://lists.apple.com/archives/security-announce/2015/Dec/msg00003.html
CVE: CVE-2015-7098
Published: 2015-12-11
Description: WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2015-7048, CVE-2015-7095, CVE-2015-7096, CVE-2015-7097, CVE-2015-7099, CVE-2015-7100, CVE-2015-7101, CVE-2015-7102, and CVE-2015-7103.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html; http://lists.apple.com/archives/security-announce/2015/Dec/msg00001.html; http://lists.apple.com/archives/security-announce/2015/Dec/msg00003.html
CVE: CVE-2015-7099
Published: 2015-12-11
Description: WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2015-7048, CVE-2015-7095, CVE-2015-7096, CVE-2015-7097, CVE-2015-7098, CVE-2015-7100, CVE-2015-7101, CVE-2015-7102, and CVE-2015-7103.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html; http://lists.apple.com/archives/security-announce/2015/Dec/msg00001.html; http://lists.apple.com/archives/security-announce/2015/Dec/msg00003.html
CVE: CVE-2015-7100
Published: 2015-12-11
Description: WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2015-7048, CVE-2015-7095, CVE-2015-7096, CVE-2015-7097, CVE-2015-7098, CVE-2015-7099, CVE-2015-7101, CVE-2015-7102, and CVE-2015-7103.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html; http://lists.apple.com/archives/security-announce/2015/Dec/msg00001.html; http://lists.apple.com/archives/security-announce/2015/Dec/msg00003.html
CVE: CVE-2015-7101
Published: 2015-12-11
Description: WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2015-7048, CVE-2015-7095, CVE-2015-7096, CVE-2015-7097, CVE-2015-7098, CVE-2015-7099, CVE-2015-7100, CVE-2015-7102, and CVE-2015-7103.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html; http://lists.apple.com/archives/security-announce/2015/Dec/msg00001.html; http://lists.apple.com/archives/security-announce/2015/Dec/msg00003.html
CVE: CVE-2015-7102
Published: 2015-12-11
Description: WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2015-7048, CVE-2015-7095, CVE-2015-7096, CVE-2015-7097, CVE-2015-7098, CVE-2015-7099, CVE-2015-7100, CVE-2015-7101, and CVE-2015-7103.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html; http://lists.apple.com/archives/security-announce/2015/Dec/msg00001.html; http://lists.apple.com/archives/security-announce/2015/Dec/msg00003.html
CVE: CVE-2015-7103
Published: 2015-12-11
Description: WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2015-7048, CVE-2015-7095, CVE-2015-7096, CVE-2015-7097, CVE-2015-7098, CVE-2015-7099, CVE-2015-7100, CVE-2015-7101, and CVE-2015-7102.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html; http://lists.apple.com/archives/security-announce/2015/Dec/msg00001.html; http://lists.apple.com/archives/security-announce/2015/Dec/msg00003.html
CVE: CVE-2015-7104
Published: 2015-12-11
Description: WebKit in Apple Safari before 9.0.2 and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Dec/msg00001.html; http://lists.apple.com/archives/security-announce/2015/Dec/msg00003.html; http://lists.opensuse.org/opensuse-updates/2016-03/msg00054.html
CVE: CVE-2015-7105
Published: 2015-12-11
Description: CoreGraphics in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html; http://lists.apple.com/archives/security-announce/2015/Dec/msg00001.html; http://lists.apple.com/archives/security-announce/2015/Dec/msg00002.html
CVE: CVE-2015-7106
Published: 2015-12-11
Description: The Intel Graphics Driver component in Apple OS X before 10.11.2 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Dec/msg00005.html; http://www.securitytracker.com/id/1034344; https://support.apple.com/HT205637
CVE: CVE-2015-7107
Published: 2015-12-11
Description: QuickLook in Apple iOS before 9.2 and OS X before 10.11.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted iWork file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html; http://lists.apple.com/archives/security-announce/2015/Dec/msg00005.html; http://www.securitytracker.com/id/1034344
CVE: CVE-2015-7108
Published: 2015-12-11
Description: The Bluetooth HCI interface in Apple OS X before 10.11.2 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Dec/msg00005.html; http://www.securitytracker.com/id/1034344; https://support.apple.com/HT205637
CVE: CVE-2015-7109
Published: 2015-12-11
Description: IOAcceleratorFamily in Apple OS X before 10.11.2 and tvOS before 9.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Dec/msg00001.html; http://lists.apple.com/archives/security-announce/2015/Dec/msg00005.html; http://www.securitytracker.com/id/1034344
CVE: CVE-2015-7110
Published: 2015-12-11
Description: The Disk Images component in Apple OS X before 10.11.2 and tvOS before 9.1 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted disk image.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2015/Dec/msg00001.html; http://lists.apple.com/archives/security-announce/2015/Dec/msg00005.html; http://www.securitytracker.com/id/1034344