# CVEs published 2015-08-16 132 CVEs were published on August 16, 2015: 0 critical, 0 high. Days are UTC. - [CVE-2013-7422](https://cve.now/CVE-2013-7422.md): Integer underflow in regcomp.c in Perl before 5.20, as used in Apple OS X before 10.10.5 and other products, allows context-dependent attack (no CVSS) - [CVE-2015-3729](https://cve.now/CVE-2015-3729.md): Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, as used in iOS before 8.4.1 and other products, does not indicate what we (no CVSS) - [CVE-2015-3730](https://cve.now/CVE-2015-3730.md): WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execut (no CVSS) - [CVE-2015-3731](https://cve.now/CVE-2015-3731.md): WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execut (no CVSS) - [CVE-2015-3732](https://cve.now/CVE-2015-3732.md): WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execut (no CVSS) - [CVE-2015-3733](https://cve.now/CVE-2015-3733.md): WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execut (no CVSS) - [CVE-2015-3734](https://cve.now/CVE-2015-3734.md): WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execut (no CVSS) - [CVE-2015-3735](https://cve.now/CVE-2015-3735.md): WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execut (no CVSS) - [CVE-2015-3736](https://cve.now/CVE-2015-3736.md): WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execut (no CVSS) - [CVE-2015-3737](https://cve.now/CVE-2015-3737.md): WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execut (no CVSS) - [CVE-2015-3738](https://cve.now/CVE-2015-3738.md): WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execut (no CVSS) - [CVE-2015-3739](https://cve.now/CVE-2015-3739.md): WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execut (no CVSS) - [CVE-2015-3740](https://cve.now/CVE-2015-3740.md): WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execut (no CVSS) - [CVE-2015-3741](https://cve.now/CVE-2015-3741.md): WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execut (no CVSS) - [CVE-2015-3742](https://cve.now/CVE-2015-3742.md): WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execut (no CVSS) - [CVE-2015-3743](https://cve.now/CVE-2015-3743.md): WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execut (no CVSS) - [CVE-2015-3744](https://cve.now/CVE-2015-3744.md): WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execut (no CVSS) - [CVE-2015-3745](https://cve.now/CVE-2015-3745.md): WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execut (no CVSS) - [CVE-2015-3746](https://cve.now/CVE-2015-3746.md): WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execut (no CVSS) - [CVE-2015-3747](https://cve.now/CVE-2015-3747.md): WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execut (no CVSS) - [CVE-2015-3748](https://cve.now/CVE-2015-3748.md): WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execut (no CVSS) - [CVE-2015-3749](https://cve.now/CVE-2015-3749.md): WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execut (no CVSS) - [CVE-2015-3750](https://cve.now/CVE-2015-3750.md): WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, as used in iOS before 8.4.1 and other products, does not enforc (no CVSS) - [CVE-2015-3751](https://cve.now/CVE-2015-3751.md): WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, as used in iOS before 8.4.1 and other products, allows remote a (no CVSS) - [CVE-2015-3752](https://cve.now/CVE-2015-3752.md): The Content Security Policy implementation in WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, as used in iOS be (no CVSS) - [CVE-2015-3753](https://cve.now/CVE-2015-3753.md): WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, as used in iOS before 8.4.1 and other products, does not proper (no CVSS) - [CVE-2015-3754](https://cve.now/CVE-2015-3754.md): The private-browsing implementation in WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8 does not prevent caching (no CVSS) - [CVE-2015-3755](https://cve.now/CVE-2015-3755.md): WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, as used in iOS before 8.4.1 and other products, allows remote a (no CVSS) - [CVE-2015-3756](https://cve.now/CVE-2015-3756.md): The Certificate UI in Apple iOS before 8.4.1 does not prevent X.509 certificate acceptance within the lock screen, which allows physically p (no CVSS) - [CVE-2015-3757](https://cve.now/CVE-2015-3757.md): Apple OS X before 10.10.5 does not properly restrict access to the Date & Time preferences pane, which allows local users to spoof the time (no CVSS) - [CVE-2015-3758](https://cve.now/CVE-2015-3758.md): UIKit WebView in Apple iOS before 8.4.1 allows attackers to bypass an intended user-confirmation requirement and initiate arbitrary FaceTime (no CVSS) - [CVE-2015-3759](https://cve.now/CVE-2015-3759.md): Location Framework in Apple iOS before 8.4.1 allows local users to bypass intended restrictions on filesystem modification via a symlink. (no CVSS) - [CVE-2015-3760](https://cve.now/CVE-2015-3760.md): dyld in Apple OS X before 10.10.5 does not properly validate pathnames in the environment, which allows local users to gain privileges via u (no CVSS) - [CVE-2015-3761](https://cve.now/CVE-2015-3761.md): The kernel in Apple OS X before 10.10.5 does not properly validate pathnames in the environment, which allows local users to gain privileges (no CVSS) - [CVE-2015-3762](https://cve.now/CVE-2015-3762.md): The Text Formats component in Apple OS X before 10.10.5, as used in TextEdit, allows remote attackers to read arbitrary files via a text fil (no CVSS) - [CVE-2015-3763](https://cve.now/CVE-2015-3763.md): Safari in Apple iOS before 8.4.1 does not limit the rate of JavaScript alert messages, which allows remote attackers to cause a denial of se (no CVSS) - [CVE-2015-3764](https://cve.now/CVE-2015-3764.md): Notification Center in Apple OS X before 10.10.5 does not properly remove dismissed notifications, which allows attackers to read arbitrary (no CVSS) - [CVE-2015-3765](https://cve.now/CVE-2015-3765.md): QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption a (no CVSS) - [CVE-2015-3766](https://cve.now/CVE-2015-3766.md): The kernel in Apple iOS before 8.4.1 and OS X before 10.10.5 does not properly restrict the mach\_port\_space\_info interface, which allows att (no CVSS) - [CVE-2015-3767](https://cve.now/CVE-2015-3767.md): udf in Apple OS X before 10.10.5 allows local users to gain privileges or cause a denial of service (memory corruption and application crash (no CVSS) - [CVE-2015-3768](https://cve.now/CVE-2015-3768.md): Integer overflow in the kernel in Apple iOS before 8.4.1 and OS X before 10.10.5 allows attackers to execute arbitrary code in a privileged (no CVSS) - [CVE-2015-3769](https://cve.now/CVE-2015-3769.md): IOFireWireFamily in Apple OS X before 10.10.5 allows local users to gain privileges or cause a denial of service (memory corruption) via uns (no CVSS) - [CVE-2015-3770](https://cve.now/CVE-2015-3770.md): IOGraphics in Apple OS X before 10.10.5 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a cr (no CVSS) - [CVE-2015-3771](https://cve.now/CVE-2015-3771.md): IOFireWireFamily in Apple OS X before 10.10.5 allows local users to gain privileges or cause a denial of service (memory corruption) via uns (no CVSS) - [CVE-2015-3772](https://cve.now/CVE-2015-3772.md): IOFireWireFamily in Apple OS X before 10.10.5 allows local users to gain privileges or cause a denial of service (memory corruption) via uns (no CVSS) - [CVE-2015-3773](https://cve.now/CVE-2015-3773.md): The SMB client in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruptio (no CVSS) - [CVE-2015-3774](https://cve.now/CVE-2015-3774.md): The Dictionary app in Apple OS X before 10.10.5 does not use HTTPS, which allows man-in-the-middle attackers to obtain sensitive information (no CVSS) - [CVE-2015-3775](https://cve.now/CVE-2015-3775.md): Apple OS X before 10.10.5 does not properly implement authentication, which allows local users to obtain admin privileges via unspecified ve (no CVSS) - [CVE-2015-3776](https://cve.now/CVE-2015-3776.md): IOKit in Apple iOS before 8.4.1 and OS X before 10.10.5 allows attackers to execute arbitrary code in a privileged context or cause a denial (no CVSS) - [CVE-2015-3777](https://cve.now/CVE-2015-3777.md): Multiple buffer overflows in blued in the Bluetooth subsystem in Apple OS X before 10.10.5 allow local users to gain privileges via XPC mess (no CVSS) - [CVE-2015-3778](https://cve.now/CVE-2015-3778.md): bootp in Apple iOS before 8.4.1 and OS X before 10.10.5 allows remote attackers to obtain potentially sensitive information about MAC addres (no CVSS) - [CVE-2015-3779](https://cve.now/CVE-2015-3779.md): QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption a (no CVSS) - [CVE-2015-3780](https://cve.now/CVE-2015-3780.md): The Bluetooth subsystem in Apple OS X before 10.10.5 allows attackers to obtain sensitive kernel memory-layout information via a crafted app (no CVSS) - [CVE-2015-3781](https://cve.now/CVE-2015-3781.md): Cross-site scripting (XSS) vulnerability in Quick Look in Apple OS X before 10.10.5 allows remote attackers to inject arbitrary web script o (no CVSS) - [CVE-2015-3782](https://cve.now/CVE-2015-3782.md): CloudKit in Apple iOS before 8.4.1 and OS X before 10.10.5 allows attackers to access an iCloud user record associated with a previous user' (no CVSS) - [CVE-2015-3783](https://cve.now/CVE-2015-3783.md): SceneKit in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and (no CVSS) - [CVE-2015-3784](https://cve.now/CVE-2015-3784.md): Office Viewer in Apple iOS before 8.4.1 and OS X before 10.10.5 allows remote attackers to read arbitrary files via an XML document containi (no CVSS) - [CVE-2015-3786](https://cve.now/CVE-2015-3786.md): The Bluetooth subsystem in Apple OS X before 10.10.5 does not properly restrict Notification Center Service access, which allows attackers t (no CVSS) - [CVE-2015-3787](https://cve.now/CVE-2015-3787.md): The Bluetooth subsystem in Apple OS X before 10.10.5 allows remote attackers to cause a denial of service via malformed Bluetooth ACL packet (no CVSS) - [CVE-2015-3788](https://cve.now/CVE-2015-3788.md): QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption a (no CVSS) - [CVE-2015-3789](https://cve.now/CVE-2015-3789.md): QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption a (no CVSS) - [CVE-2015-3790](https://cve.now/CVE-2015-3790.md): QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption a (no CVSS) - [CVE-2015-3791](https://cve.now/CVE-2015-3791.md): QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption a (no CVSS) - [CVE-2015-3792](https://cve.now/CVE-2015-3792.md): QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption a (no CVSS) - [CVE-2015-3793](https://cve.now/CVE-2015-3793.md): CFPreferences in Apple iOS before 8.4.1 allows attackers to bypass the third-party app-sandbox protection mechanism and read arbitrary manag (no CVSS) - [CVE-2015-3794](https://cve.now/CVE-2015-3794.md): The Speech UI in Apple OS X before 10.10.5, when speech alerts are enabled, allows remote attackers to execute arbitrary code or cause a den (no CVSS) - [CVE-2015-3795](https://cve.now/CVE-2015-3795.md): libxpc in Apple iOS before 8.4.1 and OS X before 10.10.5 allows attackers to execute arbitrary code in a privileged context or cause a denia (no CVSS) - [CVE-2015-3796](https://cve.now/CVE-2015-3796.md): The TRE library in Libc in Apple iOS before 8.4.1 and OS X before 10.10.5 allows context-dependent attackers to execute arbitrary code or ca (no CVSS) - [CVE-2015-3797](https://cve.now/CVE-2015-3797.md): The TRE library in Libc in Apple iOS before 8.4.1 and OS X before 10.10.5 allows context-dependent attackers to execute arbitrary code or ca (no CVSS) - [CVE-2015-3798](https://cve.now/CVE-2015-3798.md): The TRE library in Libc in Apple iOS before 8.4.1 and OS X before 10.10.5 allows context-dependent attackers to execute arbitrary code or ca (no CVSS) - [CVE-2015-3799](https://cve.now/CVE-2015-3799.md): The Apple ID OD plug-in in Apple OS X before 10.10.5 allows attackers to change arbitrary user passwords via a crafted app. (no CVSS) - [CVE-2015-3800](https://cve.now/CVE-2015-3800.md): The DiskImages component in Apple iOS before 8.4.1 and OS X before 10.10.5 allows local users to gain privileges or cause a denial of servic (no CVSS) - [CVE-2015-3802](https://cve.now/CVE-2015-3802.md): Apple iOS before 8.4.1 and OS X before 10.10.5 allow local users to bypass a code-signing protection mechanism via a crafted Mach-O file, a (no CVSS) - [CVE-2015-3803](https://cve.now/CVE-2015-3803.md): Apple iOS before 8.4.1 and OS X before 10.10.5 allow local users to bypass a code-signing protection mechanism via a crafted multi-architect (no CVSS) - [CVE-2015-3804](https://cve.now/CVE-2015-3804.md): FontParser in Apple iOS before 8.4.1 and OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (no CVSS) - [CVE-2015-3805](https://cve.now/CVE-2015-3805.md): Apple iOS before 8.4.1 and OS X before 10.10.5 allow local users to bypass a code-signing protection mechanism via a crafted Mach-O file, a (no CVSS) - [CVE-2015-3806](https://cve.now/CVE-2015-3806.md): Apple iOS before 8.4.1 and OS X before 10.10.5 allow local users to bypass a code-signing protection mechanism by appending code to a crafte (no CVSS) - [CVE-2015-3807](https://cve.now/CVE-2015-3807.md): libxml2 in Apple iOS before 8.4.1 and OS X before 10.10.5 allows remote attackers to obtain sensitive information from process memory or cau (no CVSS) - [CVE-2015-5746](https://cve.now/CVE-2015-5746.md): AppleFileConduit in Apple iOS before 8.4.1 allows attackers to bypass intended restrictions on filesystem access via an afc command that lev (no CVSS) - [CVE-2015-5747](https://cve.now/CVE-2015-5747.md): The fasttrap driver in the kernel in Apple OS X before 10.10.5 allows local users to cause a denial of service (resource consumption) via un (no CVSS) - [CVE-2015-5748](https://cve.now/CVE-2015-5748.md): The kernel in Apple OS X before 10.10.5 does not properly mount HFS volumes, which allows local users to cause a denial of service via a cra (no CVSS) - [CVE-2015-5749](https://cve.now/CVE-2015-5749.md): The Sandbox\_profiles component in Apple iOS before 8.4.1 allows attackers to bypass the third-party app-sandbox protection mechanism and rea (no CVSS) - [CVE-2015-5750](https://cve.now/CVE-2015-5750.md): Data Detectors Engine in Apple OS X before 10.10.5 allows attackers to execute arbitrary code or cause a denial of service (memory corruptio (no CVSS) - [CVE-2015-5751](https://cve.now/CVE-2015-5751.md): QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption a (no CVSS) - [CVE-2015-5752](https://cve.now/CVE-2015-5752.md): Backup in Apple iOS before 8.4.1 allows attackers to bypass intended restrictions on filesystem access via a crafted app that creates a syml (no CVSS) - [CVE-2015-5753](https://cve.now/CVE-2015-5753.md): QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption a (no CVSS) - [CVE-2015-5754](https://cve.now/CVE-2015-5754.md): Race condition in runner in Install.framework in the Install Framework Legacy component in Apple OS X before 10.10.5 allows attackers to exe (no CVSS) - [CVE-2015-5755](https://cve.now/CVE-2015-5755.md): CoreText in Apple iOS before 8.4.1 and OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (m (no CVSS) - [CVE-2015-5756](https://cve.now/CVE-2015-5756.md): FontParser in Apple iOS before 8.4.1 and OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (no CVSS) - [CVE-2015-5757](https://cve.now/CVE-2015-5757.md): libpthread in Apple iOS before 8.4.1 and OS X before 10.10.5 allows attackers to execute arbitrary code in a privileged context or cause a d (no CVSS) - [CVE-2015-5758](https://cve.now/CVE-2015-5758.md): ImageIO in Apple iOS before 8.4.1 and OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (me (no CVSS) - [CVE-2015-5759](https://cve.now/CVE-2015-5759.md): WebKit in Apple iOS before 8.4.1 allows remote attackers to spoof clicks via a crafted web site that leverages tap events. (no CVSS) - [CVE-2015-5761](https://cve.now/CVE-2015-5761.md): CoreText in Apple iOS before 8.4.1 and OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (m (no CVSS) - [CVE-2015-5763](https://cve.now/CVE-2015-5763.md): ntfs in Apple OS X before 10.10.5 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vec (no CVSS) - [CVE-2015-5766](https://cve.now/CVE-2015-5766.md): Directory traversal vulnerability in Air Traffic in Apple iOS before 8.4.1 allows attackers to access arbitrary filesystem locations via vec (no CVSS) - [CVE-2015-5768](https://cve.now/CVE-2015-5768.md): AppleGraphicsControl in Apple OS X before 10.10.5 allows attackers to obtain sensitive kernel memory-layout information via a crafted app. (no CVSS) - [CVE-2015-5769](https://cve.now/CVE-2015-5769.md): The MSVDX driver in Apple iOS before 8.4.1 allows remote attackers to cause a denial of service (device crash) via a crafted video. (no CVSS) - [CVE-2015-5770](https://cve.now/CVE-2015-5770.md): MobileInstallation in Apple iOS before 8.4.1 does not ensure the uniqueness of universal provisioning profile bundle IDs, which allows attac (no CVSS) - [CVE-2015-5771](https://cve.now/CVE-2015-5771.md): Quartz Composer Framework in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memor (no CVSS) - [CVE-2015-5772](https://cve.now/CVE-2015-5772.md): Heap-based buffer overflow in SceneKit in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code via a crafted Collada (no CVSS) - [CVE-2015-5773](https://cve.now/CVE-2015-5773.md): QL Office in Apple iOS before 8.4.1 and OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service ( (no CVSS) - [CVE-2015-5774](https://cve.now/CVE-2015-5774.md): Buffer overflow in IOHIDFamily in Apple iOS before 8.4.1 and OS X before 10.10.5 allows local users to gain privileges via unspecified vecto (no CVSS) - [CVE-2015-5775](https://cve.now/CVE-2015-5775.md): FontParser in Apple iOS before 8.4.1 and OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (no CVSS) - [CVE-2015-5776](https://cve.now/CVE-2015-5776.md): Libinfo in Apple iOS before 8.4.1 and OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (me (no CVSS) - [CVE-2015-5777](https://cve.now/CVE-2015-5777.md): CoreMedia Playback in Apple iOS before 8.4.1 and OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of (no CVSS) - [CVE-2015-5778](https://cve.now/CVE-2015-5778.md): CoreMedia Playback in Apple iOS before 8.4.1 and OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of (no CVSS) - [CVE-2015-5779](https://cve.now/CVE-2015-5779.md): QuickTime 7 in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption a (no CVSS) - [CVE-2015-5781](https://cve.now/CVE-2015-5781.md): ImageIO in Apple iOS before 8.4.1 and OS X before 10.10.5 does not properly initialize an unspecified data structure, which allows remote at (no CVSS) - [CVE-2015-5782](https://cve.now/CVE-2015-5782.md): ImageIO in Apple iOS before 8.4.1 and OS X before 10.10.5 does not properly initialize an unspecified data structure, which allows remote at (no CVSS) - [CVE-2015-5783](https://cve.now/CVE-2015-5783.md): IOGraphics in Apple OS X before 10.10.5 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a cr (no CVSS) - [CVE-2015-5784](https://cve.now/CVE-2015-5784.md): runner in Install.framework in the Install Framework Legacy component in Apple OS X before 10.10.5 does not properly drop privileges, which (no CVSS) - [CVE-2015-4473](https://cve.now/CVE-2015-4473.md): Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allow remote atta (no CVSS) - [CVE-2015-4474](https://cve.now/CVE-2015-4474.md): Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 40.0 allow remote attackers to cause a denial of servic (no CVSS) - [CVE-2015-4475](https://cve.now/CVE-2015-4475.md): The mozilla::AudioSink function in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 mishandles inconsistent sample formats withi (no CVSS) - [CVE-2015-4477](https://cve.now/CVE-2015-4477.md): Use-after-free vulnerability in the MediaStream playback feature in Mozilla Firefox before 40.0 allows remote attackers to execute arbitrary (no CVSS) - [CVE-2015-4478](https://cve.now/CVE-2015-4478.md): Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 do not impose certain ECMAScript 6 requirements on JavaScript object properties (no CVSS) - [CVE-2015-4479](https://cve.now/CVE-2015-4479.md): Multiple integer overflows in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allow remote attackers to execu (no CVSS) - [CVE-2015-4480](https://cve.now/CVE-2015-4480.md): Integer overflow in the stagefright::SampleTable::isValid function in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x bef (no CVSS) - [CVE-2015-4481](https://cve.now/CVE-2015-4481.md): Race condition in the Mozilla Maintenance Service in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 on Windows allows local us (no CVSS) - [CVE-2015-4482](https://cve.now/CVE-2015-4482.md): mar\_read.c in the Updater in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows local users to gain privileges or cause a d (no CVSS) - [CVE-2015-4483](https://cve.now/CVE-2015-4483.md): Mozilla Firefox before 40.0 allows man-in-the-middle attackers to bypass a mixed-content protection mechanism via a feed: URL in a POST requ (no CVSS) - [CVE-2015-4484](https://cve.now/CVE-2015-4484.md): The js::jit::AssemblerX86Shared::lock\_addl function in the JavaScript implementation in Mozilla Firefox before 40.0 and Firefox ESR 38.x bef (no CVSS) - [CVE-2015-4485](https://cve.now/CVE-2015-4485.md): Heap-based buffer overflow in the resize\_context\_buffers function in libvpx in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 (no CVSS) - [CVE-2015-4486](https://cve.now/CVE-2015-4486.md): The decrease\_ref\_count function in libvpx in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute (no CVSS) - [CVE-2015-4487](https://cve.now/CVE-2015-4487.md): The nsTSubstring::ReplacePrep function in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 might allow r (no CVSS) - [CVE-2015-4488](https://cve.now/CVE-2015-4488.md): Use-after-free vulnerability in the StyleAnimationValue class in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS b (no CVSS) - [CVE-2015-4489](https://cve.now/CVE-2015-4489.md): The nsTArray\_Impl class in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 might allow remote attackers (no CVSS) - [CVE-2015-4490](https://cve.now/CVE-2015-4490.md): The nsCSPHostSrc::permits function in dom/security/nsCSPUtils.cpp in Mozilla Firefox before 40.0 does not implement the Content Security Pol (no CVSS) - [CVE-2015-4491](https://cve.now/CVE-2015-4491.md): Integer overflow in the make\_filter\_table function in pixops/pixops.c in gdk-pixbuf before 2.31.5, as used in Mozilla Firefox before 40.0 an (no CVSS) - [CVE-2015-4492](https://cve.now/CVE-2015-4492.md): Use-after-free vulnerability in the XMLHttpRequest::Open implementation in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 migh (no CVSS) - [CVE-2015-4493](https://cve.now/CVE-2015-4493.md): Heap-based buffer overflow in the stagefright::ESDS::parseESDescriptor function in libstagefright in Mozilla Firefox before 40.0 and Firefox (no CVSS) - [CVE-2015-4496](https://cve.now/CVE-2015-4496.md): Multiple integer overflows in libstagefright in Mozilla Firefox before 38.0 allow remote attackers to execute arbitrary code via crafted sam (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2015-08-16 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.