Vulnerabilities > Apple > MAC OS X
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2015-04-14 | CVE-2015-0347 | Memory Corruption vulnerability in Adobe Flash Player Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043. | 10.0 |
| 2015-04-14 | CVE-2015-0346 | Remote Code Execution vulnerability in Adobe Flash Player APSB15-06 Double free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0359. | 10.0 |
| 2015-04-10 | CVE-2015-1148 | Information Exposure vulnerability in Apple mac OS X Screen Sharing in Apple OS X before 10.10.3 stores the password of a user in a log file, which might allow context-dependent attackers to obtain sensitive information by reading this file. | 5.0 |
| 2015-04-10 | CVE-2015-1147 | Information Exposure vulnerability in Apple mac OS X Open Directory Client in Apple OS X before 10.10.3 sends unencrypted password-change requests in certain circumstances involving missing certificates, which allows remote attackers to obtain sensitive information by sniffing the network. | 5.0 |
| 2015-04-10 | CVE-2015-1146 | Cryptographic Issues vulnerability in Apple mac OS X The Code Signing implementation in Apple OS X before 10.10.3 does not properly validate signatures, which allows local users to bypass intended access restrictions via a crafted bundle, a different vulnerability than CVE-2015-1145. | 1.9 |
| 2015-04-10 | CVE-2015-1145 | Cryptographic Issues vulnerability in Apple mac OS X The Code Signing implementation in Apple OS X before 10.10.3 does not properly validate signatures, which allows local users to bypass intended access restrictions via a crafted bundle, a different vulnerability than CVE-2015-1146. | 1.9 |
| 2015-04-10 | CVE-2015-1144 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Apple mac OS X Buffer overflow in the UniformTypeIdentifiers component in Apple OS X before 10.10.3 allows local users to gain privileges via a crafted Uniform Type Identifier. | 7.2 |
| 2015-04-10 | CVE-2015-1143 | Multiple Security vulnerability in Apple Mac OS X Prior to 10.10.3 LaunchServices in Apple OS X before 10.10.3 allows local users to gain privileges via a crafted localized string, related to a "type confusion" issue. | 7.2 |
| 2015-04-10 | CVE-2015-1142 | Improper Input Validation vulnerability in Apple mac OS X LaunchServices in Apple OS X before 10.10.3 allows local users to cause a denial of service (Finder crash) via crafted localization data. | 2.1 |
| 2015-04-10 | CVE-2015-1141 | Multiple Security vulnerability in Apple Mac OS X Prior to 10.10.3 The mach_vm_read functionality in the kernel in Apple OS X before 10.10.3 allows local users to cause a denial of service (system crash) via unspecified vectors. | 4.9 |