CVE-2015-6988 The kernel in Apple iOS before 9.1 and OS X before 10.11.1 does not initialize an unspecified data structure, which allows remote attackers to execute arbitrary code via vectors involving an unknown n...
HighCVSS 10.0
EPSS 5.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The kernel in Apple iOS before 9.1 and OS X before 10.11.1 does not initialize an unspecified data structure, which allows remote attackers to execute arbitrary code via vectors involving an unknown network-connectivity requirement.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple iphone os | <= 9.0.2 | No fix listed |
| apple mac os x | <= 10.11.0 | No fix listed |
References
- APPLE-SA-2015-10-21-1 vendor-advisory
- APPLE-SA-2015-10-21-4 vendor-advisory
- 77263 vdb-entry
- 1033929 vdb-entry
- support.apple.com vendor-advisory
- support.apple.com vendor-advisory