rainbutterfly/cve_corpus huggingface dataset:
CVE-2015-3701 
Buffer overflow in the Intel Graphics Driver in Apple OS X before 10.10.4 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2015-3695, CVE-2015-3696, CVE-2015-3697, CVE-2015-3698, CVE-2015-3699, CVE-2015-3700, and CVE-2015-3702.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-03T01:00:00.000Z
CVE-2015-3702 
Buffer overflow in the Intel Graphics Driver in Apple OS X before 10.10.4 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2015-3695, CVE-2015-3696, CVE-2015-3697, CVE-2015-3698, CVE-2015-3699, CVE-2015-3700, and CVE-2015-3701.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-03T01:00:00.000Z
CVE-2015-3703 
ImageIO in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted TIFF image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-03T01:00:00.000Z
CVE-2015-3704 
runner in Install.framework in the Install Framework Legacy subsystem in Apple OS X before 10.10.4 does not properly drop privileges, which allows attackers to execute arbitrary code in a privileged context via a crafted app.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-03T01:00:00.000Z
CVE-2015-3705 
IOAcceleratorFamily in Apple OS X before 10.10.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2015-3706.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-03T01:00:00.000Z
CVE-2015-3706 
IOAcceleratorFamily in Apple OS X before 10.10.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2015-3705.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-03T01:00:00.000Z
CVE-2015-3707 
The FireWire driver in IOFireWireFamily in Apple OS X before 10.10.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference) via a crafted app.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-03T01:00:00.000Z
CVE-2015-3708 
kextd in kext tools in Apple OS X before 10.10.4 allows attackers to write to arbitrary files via a crafted app that conducts a symlink attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-03T01:00:00.000Z
CVE-2015-3709 
Race condition in kext tools in Apple OS X before 10.10.4 allows local users to bypass intended signature requirements for kernel extensions by leveraging improper pathname validation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-03T01:00:00.000Z
CVE-2015-3710 
Mail in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to trigger a refresh operation, and consequently cause a visit to an arbitrary web site, via a crafted HTML e-mail message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-03T01:00:00.000Z
CVE-2015-3711 
The NTFS implementation in Apple OS X before 10.10.4 allows attackers to obtain sensitive memory-layout information for the kernel via a crafted app.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-03T01:00:00.000Z
CVE-2015-3712 
The NVIDIA graphics driver in Apple OS X before 10.10.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (out-of-bounds write) via a crafted app.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-03T01:00:00.000Z
CVE-2015-3713 
QuickTime in Apple OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted movie file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-03T01:00:00.000Z
CVE-2015-3714 
Apple OS X before 10.10.4 does not properly consider custom resource rules during app signature verification, which allows attackers to bypass intended launch restrictions via a modified app.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-03T01:00:00.000Z
CVE-2015-3715 
The code-signing implementation in Apple OS X before 10.10.4 does not properly consider libraries that are external to an application bundle, which allows attackers to bypass intended launch restrictions via a crafted library.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-03T01:00:00.000Z
CVE-2015-3716 
Spotlight in Apple OS X before 10.10.4 allows attackers to execute arbitrary commands via a crafted name of a photo file within the local photo library.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-03T01:00:00.000Z
CVE-2015-3717 
Multiple buffer overflows in the printf functionality in SQLite, as used in Apple iOS before 8.4 and OS X before 10.10.4, allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-03T01:00:00.000Z
CVE-2015-3718 
systemstatsd in the System Stats subsystem in Apple OS X before 10.10.4 does not properly interpret data types encountered in interprocess communication, which allows attackers to execute arbitrary code with systemstatsd privileges via a crafted app, related to a "type confusion" issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-03T01:00:00.000Z
CVE-2015-3719 
TrueTypeScaler in FontParser in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-3694.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-03T01:00:00.000Z
CVE-2015-3720 
The kernel in Apple OS X before 10.10.4 does not properly manage memory in kernel-extension APIs, which allows attackers to obtain sensitive memory-layout information via a crafted app.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-03T01:00:00.000Z
CVE-2015-3721 
The kernel in Apple iOS before 8.4 and OS X before 10.10.4 does not properly handle HFS parameters, which allows attackers to obtain sensitive memory-layout information via a crafted app.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-03T01:00:00.000Z
CVE-2015-3722 
Application Store in Apple iOS before 8.4 does not ensure the uniqueness of bundle IDs, which allows attackers to cause a denial of service (ID collision and launch outage) via a crafted universal provisioning profile app.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-03T01:00:00.000Z
CVE-2015-3723 
CoreGraphics in Apple iOS before 8.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted ICC profile in a PDF document, a different vulnerability than CVE-2015-3724.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-03T01:00:00.000Z
CVE-2015-3724 
CoreGraphics in Apple iOS before 8.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted ICC profile in a PDF document, a different vulnerability than CVE-2015-3723.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-03T01:00:00.000Z
CVE-2015-3725 
MobileInstallation in Apple iOS before 8.4 does not ensure the uniqueness of Watch bundle IDs, which allows attackers to cause a denial of service (ID collision and Watch launch outage) via a crafted universal provisioning profile app.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-03T01:00:00.000Z
CVE-2015-3726 
The Telephony subsystem in Apple iOS before 8.4 allows physically proximate attackers to execute arbitrary code via a crafted (1) SIM or (2) UIM card.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-03T01:00:00.000Z
CVE-2015-3727 
WebKit in Apple Safari before 6.2.7, 7.x before 7.1.7, and 8.x before 8.0.7, as used in Apple iOS before 8.4 and other products, does not properly restrict rename operations on WebSQL tables, which allows remote attackers to access an arbitrary web site's database via a crafted web site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-03T01:00:00.000Z
CVE-2015-3728 
The WiFi Connectivity feature in Apple iOS before 8.4 allows remote Wi-Fi access points to trigger an automatic association, with an arbitrary security type, by operating with a recognized ESSID within an 802.11 network's coverage area.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-07-03T01:00:00.000Z
CVE-2015-3729 
Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, as used in iOS before 8.4.1 and other products, does not indicate what web site originated an input prompt, which allows remote attackers to conduct spoofing attacks via a crafted site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-16T23:00:00.000Z
CVE-2015-3730 
WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-08-13-1 and APPLE-SA-2015-08-13-3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-16T23:00:00.000Z
CVE-2015-3731 
WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-08-13-1 and APPLE-SA-2015-08-13-3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-16T23:00:00.000Z
CVE-2015-3732 
WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-08-13-1 and APPLE-SA-2015-08-13-3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-16T23:00:00.000Z
CVE-2015-3733 
WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-08-13-1 and APPLE-SA-2015-08-13-3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-16T23:00:00.000Z
CVE-2015-3734 
WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-08-13-1 and APPLE-SA-2015-08-13-3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-16T23:00:00.000Z
CVE-2015-3735 
WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-08-13-1 and APPLE-SA-2015-08-13-3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-16T23:00:00.000Z
CVE-2015-3736 
WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-08-13-1 and APPLE-SA-2015-08-13-3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-16T23:00:00.000Z
CVE-2015-3737 
WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-08-13-1 and APPLE-SA-2015-08-13-3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-16T23:00:00.000Z
CVE-2015-3738 
WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-08-13-1 and APPLE-SA-2015-08-13-3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-16T23:00:00.000Z
CVE-2015-3739 
WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-08-13-1 and APPLE-SA-2015-08-13-3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-16T23:00:00.000Z
CVE-2015-3740 
WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-08-13-1 and APPLE-SA-2015-08-13-3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-16T23:00:00.000Z
CVE-2015-3741 
WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-08-13-1 and APPLE-SA-2015-08-13-3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-16T23:00:00.000Z
CVE-2015-3742 
WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-08-13-1 and APPLE-SA-2015-08-13-3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-16T23:00:00.000Z
CVE-2015-3743 
WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-08-13-1 and APPLE-SA-2015-08-13-3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-16T23:00:00.000Z
CVE-2015-3744 
WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-08-13-1 and APPLE-SA-2015-08-13-3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-16T23:00:00.000Z
CVE-2015-3745 
WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-08-13-1 and APPLE-SA-2015-08-13-3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-16T23:00:00.000Z
CVE-2015-3746 
WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-08-13-1 and APPLE-SA-2015-08-13-3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-16T23:00:00.000Z
CVE-2015-3747 
WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-08-13-1 and APPLE-SA-2015-08-13-3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-16T23:00:00.000Z
CVE-2015-3748 
WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-08-13-1 and APPLE-SA-2015-08-13-3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-16T23:00:00.000Z
CVE-2015-3749 
WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-08-13-1 and APPLE-SA-2015-08-13-3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-16T23:00:00.000Z
CVE-2015-3750 
WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, as used in iOS before 8.4.1 and other products, does not enforce the HTTP Strict Transport Security (HSTS) protection mechanism for Content Security Policy (CSP) report requests, which allows man-in-the-middle attackers to obtain sensitive information by sniffing the network or spoof a report by modifying the client-server data stream.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-16T23:00:00.000Z
CVE-2015-3751 
WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, as used in iOS before 8.4.1 and other products, allows remote attackers to bypass a Content Security Policy protection mechanism by using a video control in conjunction with an IMG element within an OBJECT element.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-16T23:00:00.000Z
CVE-2015-3752 
The Content Security Policy implementation in WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, as used in iOS before 8.4.1 and other products, does not properly restrict cookie transmission for report requests, which allows remote attackers to obtain sensitive information via vectors involving (1) a cross-origin request or (2) a private-browsing request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-16T23:00:00.000Z
CVE-2015-3753 
WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, as used in iOS before 8.4.1 and other products, does not properly perform taint checking for CANVAS elements, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive image data by leveraging a redirect to a data:image resource.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-16T23:00:00.000Z
CVE-2015-3754 
The private-browsing implementation in WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8 does not prevent caching of HTTP authentication credentials, which makes it easier for remote attackers to track users via a crafted web site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-16T23:00:00.000Z
CVE-2015-3755 
WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, as used in iOS before 8.4.1 and other products, allows remote attackers to spoof the user interface via a malformed URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-16T23:00:00.000Z
CVE-2015-3756 
The Certificate UI in Apple iOS before 8.4.1 does not prevent X.509 certificate acceptance within the lock screen, which allows physically proximate attackers to establish arbitrary certificate trust relationships by completing a dialog.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-16T23:00:00.000Z
CVE-2015-3757 
Apple OS X before 10.10.5 does not properly restrict access to the Date & Time preferences pane, which allows local users to spoof the time by visiting this pane.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-16T23:00:00.000Z
CVE-2015-3758 
UIKit WebView in Apple iOS before 8.4.1 allows attackers to bypass an intended user-confirmation requirement and initiate arbitrary FaceTime calls via an app that provides a crafted URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-16T23:00:00.000Z
CVE-2015-3759 
Location Framework in Apple iOS before 8.4.1 allows local users to bypass intended restrictions on filesystem modification via a symlink.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-16T23:00:00.000Z
CVE-2015-3760 
dyld in Apple OS X before 10.10.5 does not properly validate pathnames in the environment, which allows local users to gain privileges via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-16T23:00:00.000Z
CVE-2015-3761 
The kernel in Apple OS X before 10.10.5 does not properly validate pathnames in the environment, which allows local users to gain privileges via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-16T23:00:00.000Z