Vulnerabilities > Apple > MAC OS X > 10.10.5

DATE CVE VULNERABILITY TITLE RISK
2015-10-09 CVE-2015-5849 Permissions, Privileges, and Access Controls vulnerability in Apple mac OS X
The filtering implementation in AppleEvents in Apple OS X before 10.11 mishandles attempts to send events to a different user, which allows attackers to bypass intended access restrictions by leveraging a screen-sharing connection.
network
apple CWE-264
6.8
2015-10-09 CVE-2015-5836 Information Exposure vulnerability in Apple mac OS X
Apple Online Store Kit in Apple OS X before 10.11 improperly validates iCloud keychain item ACLs, which allows attackers to obtain access to keychain items via a crafted app.
network
apple CWE-200
4.3
2015-10-09 CVE-2015-5833 7PK - Security Features vulnerability in Apple mac OS X
The Login Window component in Apple OS X before 10.11 does not ensure that the screen is locked at the intended time, which allows physically proximate attackers to obtain access by visiting an unattended workstation.
local
low complexity
apple CWE-254
7.2
2015-10-09 CVE-2015-5830 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Apple mac OS X
The Intel Graphics Driver component in Apple OS X before 10.11 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5877.
local
low complexity
apple CWE-119
7.2
2015-10-09 CVE-2015-3785 Multiple Security vulnerability in Apple Mac OS X Prior to 10.11
The Telephony component in Apple OS X before 10.11, when the Continuity feature is enabled, allows local users to bypass intended telephone-call restrictions via unspecified vectors.
local
apple
1.9
2015-09-18 CVE-2015-5912 Code vulnerability in Apple Iphone OS and mac OS X
The CFNetwork FTPProtocol component in Apple iOS before 9 allows remote FTP proxy servers to trigger TCP connection attempts to intranet hosts via crafted responses.
network
low complexity
apple CWE-17
5.0
2015-09-18 CVE-2015-5903 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Apple Iphone OS, mac OS X and Watchos
The kernel in Apple iOS before 9 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5868 and CVE-2015-5896.
network
low complexity
apple CWE-119
critical
10.0
2015-09-18 CVE-2015-5899 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Apple Iphone OS, mac OS X and Watchos
libpthread in the kernel in Apple iOS before 9 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.
local
low complexity
apple CWE-119
7.2
2015-09-18 CVE-2015-5896 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Apple Iphone OS, mac OS X and Watchos
The kernel in Apple iOS before 9 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5868 and CVE-2015-5903.
local
low complexity
apple CWE-119
7.2
2015-09-18 CVE-2015-5885 Information Exposure vulnerability in Apple Iphone OS, mac OS X and Watchos
The CFNetwork Cookies component in Apple iOS before 9 allows remote attackers to track users via vectors involving a cookie for a top-level domain.
network
low complexity
apple CWE-200
5.0