rainbutterfly/cve_corpus huggingface dataset:
CVE-2015-6996 
IOAcceleratorFamily in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted app.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-23T21:00:00.000Z
CVE-2015-6997 
The X.509 certificate-trust implementation in Apple iOS before 9.1 does not recognize that the kSecRevocationRequirePositiveResponse flag implies a revocation-checking requirement, which makes it easier for man-in-the-middle attackers to spoof endpoints by leveraging access to a revoked certificate.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-23T10:00:00.000Z
CVE-2015-6999 
The OCSP client in Apple iOS before 9.1 does not check for certificate expiry, which allows remote attackers to spoof a valid certificate by leveraging access to a revoked certificate.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-23T10:00:00.000Z
CVE-2015-7000 
Notification Center in Apple iOS before 9.1 mishandles changes to "Show on Lock Screen" settings, which allows physically proximate attackers to obtain sensitive information by looking for a (1) Phone or (2) Messages notification on the lock screen soon after a setting was disabled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-23T10:00:00.000Z
CVE-2015-7001 
AppSandbox in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 mishandles hard links, which allows attackers to bypass Contacts access revocation via a crafted app.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-11T11:00:00.000Z
CVE-2015-7002 
WebKit, as used in Apple iOS before 9.1, Safari before 9.0.1, and iTunes before 12.3.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-10-21-1, APPLE-SA-2015-10-21-3, and APPLE-SA-2015-10-21-5.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-23T21:00:00.000Z
CVE-2015-7003 
coreaudiod in Audio in Apple OS X before 10.11.1 does not initialize an unspecified data structure, which allows attackers to execute arbitrary code via a crafted app.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-23T21:00:00.000Z
CVE-2015-7004 
The kernel in Apple iOS before 9.1 allows attackers to cause a denial of service via a crafted app.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-23T10:00:00.000Z
CVE-2015-7005 
WebKit, as used in Apple iOS before 9.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-10-21-1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-23T10:00:00.000Z
CVE-2015-7006 
Directory traversal vulnerability in the BOM (aka Bill of Materials) component in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code via a crafted CPIO archive.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-23T21:00:00.000Z
CVE-2015-7007 
Script Editor in Apple OS X before 10.11.1 allows remote attackers to bypass an intended user-confirmation requirement for AppleScript execution via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-23T21:00:00.000Z
CVE-2015-7008 
FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6976, CVE-2015-6977, CVE-2015-6978, CVE-2015-6990, CVE-2015-6991, CVE-2015-6993, CVE-2015-7009, CVE-2015-7010, and CVE-2015-7018.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-23T21:00:00.000Z
CVE-2015-7009 
FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6976, CVE-2015-6977, CVE-2015-6978, CVE-2015-6990, CVE-2015-6991, CVE-2015-6993, CVE-2015-7008, CVE-2015-7010, and CVE-2015-7018.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-23T21:00:00.000Z
CVE-2015-7010 
FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6976, CVE-2015-6977, CVE-2015-6978, CVE-2015-6990, CVE-2015-6991, CVE-2015-6993, CVE-2015-7008, CVE-2015-7009, and CVE-2015-7018.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-23T21:00:00.000Z
CVE-2015-7011 
WebKit, as used in Apple Safari before 9.0.1 and iTunes before 12.3.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-10-21-3 and APPLE-SA-2015-10-21-5.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-23T21:00:00.000Z
CVE-2015-7012 
WebKit, as used in Apple iOS before 9.1, Safari before 9.0.1, and iTunes before 12.3.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-10-21-1, APPLE-SA-2015-10-21-3, and APPLE-SA-2015-10-21-5.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-23T21:00:00.000Z
CVE-2015-7013 
WebKit, as used in Apple Safari before 9.0.1 and iTunes before 12.3.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-10-21-3 and APPLE-SA-2015-10-21-5.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-23T21:00:00.000Z
CVE-2015-7014 
WebKit, as used in Apple iOS before 9.1, Safari before 9.0.1, and iTunes before 12.3.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-10-21-1, APPLE-SA-2015-10-21-3, and APPLE-SA-2015-10-21-5.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-23T21:00:00.000Z
CVE-2015-7015 
Heap-based buffer overflow in the DNS client library in configd in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows attackers to execute arbitrary code via a crafted app that sends a spoofed configd response to a client.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-23T21:00:00.000Z
CVE-2015-7016 
The MCX Application Restrictions component in Apple OS X before 10.11.1, when Managed Configuration is enabled, mishandles provisioning profiles, which allows attackers to bypass intended entitlement restrictions and gain privileges via a crafted developer-signed app.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-23T21:00:00.000Z
CVE-2015-7017 
CoreText in Apple iOS before 9.1, OS X before 10.11.1, and iTunes before 12.3.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6975 and CVE-2015-6992.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-23T10:00:00.000Z
CVE-2015-7018 
FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file, a different vulnerability than CVE-2015-6976, CVE-2015-6977, CVE-2015-6978, CVE-2015-6990, CVE-2015-6991, CVE-2015-6993, CVE-2015-7008, CVE-2015-7009, and CVE-2015-7010.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-23T21:00:00.000Z
CVE-2015-7019 
The NVIDIA driver in the Graphics Drivers subsystem in Apple OS X before 10.11.1 allows local users to obtain sensitive information from kernel memory or cause a denial of service (out-of-bounds read and system crash) via unspecified vectors, a different vulnerability than CVE-2015-7020.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-23T21:00:00.000Z
CVE-2015-7020 
The NVIDIA driver in the Graphics Drivers subsystem in Apple OS X before 10.11.1 allows local users to obtain sensitive information from kernel memory or cause a denial of service (out-of-bounds read and system crash) via unspecified vectors, a different vulnerability than CVE-2015-7019.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-23T21:00:00.000Z
CVE-2015-7021 
The Graphics Drivers subsystem in Apple OS X before 10.11.1 allows local users to gain privileges or cause a denial of service (kernel memory corruption) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-23T21:00:00.000Z
CVE-2015-7022 
The Telephony subsystem in Apple iOS before 9.1 allows attackers to obtain sensitive call-status information via a crafted app.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-23T10:00:00.000Z
CVE-2015-7023 
CFNetwork in Apple iOS before 9.1 and OS X before 10.11.1 does not properly consider the uppercase-versus-lowercase distinction during cookie parsing, which allows remote web servers to overwrite cookies via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-23T21:00:00.000Z
CVE-2015-7024 
Untrusted search path vulnerability in Apple OS X before 10.11.1 allows local users to bypass intended Gatekeeper restrictions and gain privileges via a Trojan horse program that is loaded from an unexpected directory by an application that has a valid Apple digital signature.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-11T11:00:00.000Z
CVE-2015-7029 
Apple AirPort Base Station Firmware before 7.6.7 and 7.7.x before 7.7.7 misparses DNS data, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-07-03T01:00:00.000Z
CVE-2015-7030 
The Swift implementation in Apple Xcode before 7.1 mishandles type conversion, which has unspecified impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-23T10:00:00.000Z
CVE-2015-7031 
The Web Service component in Apple OS X Server before 5.0.15 omits an unspecified HTTP header configuration, which allows remote attackers to bypass intended access restrictions via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-23T10:00:00.000Z
CVE-2015-7032 
The Apple iWork application before 2.6 for iOS, Apple Keynote before 6.6, Apple Pages before 5.6, and Apple Numbers before 3.6 allow remote attackers to obtain sensitive information via a crafted document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-18T19:00:00.000Z
CVE-2015-7033 
The Apple iWork application before 2.6 for iOS, Apple Keynote before 6.6, Apple Pages before 5.6, and Apple Numbers before 3.6 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-18T19:00:00.000Z
CVE-2015-7034 
The Apple iWork application before 2.6 for iOS and Apple Pages before 5.6 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted Pages document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-18T19:00:00.000Z
CVE-2015-7035 
Apple Mac EFI before 2015-002, as used in OS X before 10.11.1 and other products, mishandles arguments, which allows attackers to reach "unused" functions via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-23T10:00:00.000Z
CVE-2015-7036 
The fts3_tokenizer function in SQLite, as used in Apple iOS before 8.4 and OS X before 10.10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a SQL command that triggers an API call with a crafted pointer value in the second argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-11-22T02:00:00.000Z
CVE-2015-7037 
Directory traversal vulnerability in Mobile Backup in Photos in Apple iOS before 9.2 allows attackers to read arbitrary files via a crafted pathname.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-11T11:00:00.000Z
CVE-2015-7038 
Buffer overflow in libc in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code via a crafted package, a different vulnerability than CVE-2015-7039.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-11T11:00:00.000Z
CVE-2015-7039 
Buffer overflow in libc in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code via a crafted package, a different vulnerability than CVE-2015-7038.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-11T11:00:00.000Z
CVE-2015-7040 
The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to cause a denial of service via a crafted app, a different vulnerability than CVE-2015-7041, CVE-2015-7042, and CVE-2015-7043.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-11T11:00:00.000Z
CVE-2015-7041 
The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to cause a denial of service via a crafted app, a different vulnerability than CVE-2015-7040, CVE-2015-7042, and CVE-2015-7043.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-11T11:00:00.000Z
CVE-2015-7042 
The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to cause a denial of service via a crafted app, a different vulnerability than CVE-2015-7040, CVE-2015-7041, and CVE-2015-7043.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-11T11:00:00.000Z
CVE-2015-7043 
The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to cause a denial of service via a crafted app, a different vulnerability than CVE-2015-7040, CVE-2015-7041, and CVE-2015-7042.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-11T11:00:00.000Z
CVE-2015-7044 
The System Integrity Protection feature in Apple OS X before 10.11.2 mishandles union mounts, which allows attackers to execute arbitrary code in a privileged context via a crafted app with root privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-11T11:00:00.000Z
CVE-2015-7045 
Keychain Access in Apple OS X before 10.11.2 and tvOS before 9.1 improperly interacts with Keychain Agent, which allows attackers to spoof the Keychain Server via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-11T11:00:00.000Z
CVE-2015-7046 
The Sandbox feature in xnu in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 does not properly implement privilege separation, which allows attackers to bypass the ASLR protection mechanism via a crafted app with root privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-11T11:00:00.000Z
CVE-2015-7047 
The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to gain privileges via a crafted mach message that is misparsed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-11T11:00:00.000Z
CVE-2015-7048 
WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2015-7095, CVE-2015-7096, CVE-2015-7097, CVE-2015-7098, CVE-2015-7099, CVE-2015-7100, CVE-2015-7101, CVE-2015-7102, and CVE-2015-7103.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-11T11:00:00.000Z
CVE-2015-7049 
otools in Apple Xcode before 7.2 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted mach-o file, a different vulnerability than CVE-2015-7057.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-11T11:00:00.000Z
CVE-2015-7050 
WebKit in Apple iOS before 9.2 and Safari before 9.0.2 misparses content extensions, which allows remote attackers to obtain sensitive browsing-history information via a crafted web site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-11T11:00:00.000Z
CVE-2015-7051 
MobileStorageMounter in Apple iOS before 9.2 and tvOS before 9.1 mishandles the timing of trust-cache loading, which allows attackers to execute arbitrary code in a privileged context via a crafted app.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-11T11:00:00.000Z
CVE-2015-7052 
kext tools in Apple OS X before 10.11.2 mishandles kernel-extension loading, which allows local users to gain privileges via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-11T11:00:00.000Z
CVE-2015-7053 
ImageIO in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-11T11:00:00.000Z
CVE-2015-7054 
zlib in the Compression component in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 does not initialize memory for an unspecified data structure, which allows remote attackers to execute arbitrary code via a crafted web site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-11T11:00:00.000Z
CVE-2015-7055 
AppleMobileFileIntegrity in Apple iOS before 9.2 and tvOS before 9.1 does not prevent changes to access-control structures, which allows attackers to execute arbitrary code in a privileged context via a crafted app.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-11T11:00:00.000Z
CVE-2015-7056 
IDE SCM in Apple Xcode before 7.2 does not recognize .gitignore files, which allows remote attackers to obtain sensitive information in opportunistic circumstances by leveraging the presence of a file matching an ignore pattern.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-11T11:00:00.000Z
CVE-2015-7057 
otools in Apple Xcode before 7.2 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted mach-o file, a different vulnerability than CVE-2015-7049.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-11T11:00:00.000Z
CVE-2015-7058 
Apple iOS before 9.2, OS X before 10.11.2, and tvOS before 9.1 improperly validate keychain item ACLs, which allows attackers to obtain access to keychain items via a crafted app.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-11T11:00:00.000Z
CVE-2015-7059 
The ASN.1 decoder in Apple OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted certificate, a different vulnerability than CVE-2015-7060 and CVE-2015-7061.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-11T11:00:00.000Z
CVE-2015-7060 
The ASN.1 decoder in Apple OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted certificate, a different vulnerability than CVE-2015-7059 and CVE-2015-7061.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-11T11:00:00.000Z
CVE-2015-7061 
The ASN.1 decoder in Apple OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted certificate, a different vulnerability than CVE-2015-7059 and CVE-2015-7060.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-11T11:00:00.000Z
CVE-2015-7062 
Apple OS X before 10.11.2 and tvOS before 9.1 allow local users to bypass intended configuration-profile installation restrictions via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-11T11:00:00.000Z
CVE-2015-7063 
The kernel loader in EFI in Apple OS X before 10.11.2 allows local users to gain privileges via a crafted pathname.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-11T11:00:00.000Z
CVE-2015-7064 
OpenGL in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2015-7066.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-11T11:00:00.000Z
CVE-2015-7065 
OpenGL in Apple iOS before 9.2, OS X before 10.11.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-11T11:00:00.000Z
CVE-2015-7066 
OpenGL in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2015-7064.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-11T11:00:00.000Z
CVE-2015-7067 
IOThunderboltFamily in Apple OS X before 10.11.2 allows local users to cause a denial of service (NULL pointer dereference) via an unspecified userclient type.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-11T11:00:00.000Z