CVE-2015-7032

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

The Apple iWork application before 2.6 for iOS, Apple Keynote before 6.6, Apple Pages before 5.6, and Apple Numbers before 3.6 allow remote attackers to obtain sensitive information via a crafted document.

Metrics

CVSS 2.0 4.3/10AV:N/AC:M/Au:N/C:P/I:N/A:N

Weakness enumeration

CWE-200

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lists.apple.com/archives/security-announce/2015/Oct/msg00000.htmlVendor Advisory
http://www.securitytracker.com/id/1033823Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1033825Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1033826Third Party Advisory, VDB Entry
https://support.apple.com/HT205373Vendor Advisory
http://lists.apple.com/archives/security-announce/2015/Oct/msg00000.htmlVendor Advisory
http://www.securitytracker.com/id/1033823Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1033825Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1033826Third Party Advisory, VDB Entry
https://support.apple.com/HT205373Vendor Advisory

Timeline

Published: Oct 18, 2015
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2015

CVE-2015-70336.8The Apple iWork application before 2.6 for iOS, Apple Keynote before 6.6, Apple Pages before 5.6, and Apple Numbers before 3.6 allow remote CVE-2015-70346.8The Apple iWork application before 2.6 for iOS and Apple Pages before 5.6 allow remote attackers to execute arbitrary code or cause a denial CVE-2015-70357.5Apple Mac EFI before 2015-002, as used in OS X before 10.11.1 and other products, mishandles arguments, which allows attackers to reach "unu CVE-2015-70367.5The fts3_tokenizer function in SQLite, as used in Apple iOS before 8.4 and OS X before 10.10.4, allows remote attackers to execute arbitrary CVE-2015-70375.0Directory traversal vulnerability in Mobile Backup in Photos in Apple iOS before 9.2 allows attackers to read arbitrary files via a crafted CVE-2015-70386.8Buffer overflow in libc in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to exe CVE-2015-70396.8Buffer overflow in libc in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to exe CVE-2015-70404.3The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to cause a denial of servi CVE-2015-70414.3The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to cause a denial of servi CVE-2015-70424.3The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to cause a denial of servi CVE-2015-70434.3The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to cause a denial of servi CVE-2015-70447.6The System Integrity Protection feature in Apple OS X before 10.11.2 mishandles union mounts, which allows attackers to execute arbitrary co