About the security content of OS X El Capitan 10.11.1, Security Update 2015-004 Yosemite, and Security Update 2015-007 Mavericks - Apple Support

Linked CVE reports

These are source relationships, not a claim that this article fixes every affected product or branch.

• CVE-2015-6563n/a: Improper Input Validation
• CVE-2012-6151n/a: security vulnerability
• CVE-2014-4860Phoenix Technologies Ltd. SCT3 — Integer Overflow or Wraparound
• CVE-2014-3565n/a: security vulnerability
• CVE-2015-7988n/a: security vulnerability
• CVE-2015-7987n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-7059n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-7019n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-7024n/a: security vulnerability
• CVE-2015-7003coreaudiod in Audio in Apple OS X before 10.11.1 does not initialize an unspecified data structure, which allows attackers to execute arbitrary code via a crafted app
• CVE-2015-7017n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-7060n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-6975n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-7018n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-7006n/a: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
• CVE-2015-7016n/a: security vulnerability
• CVE-2015-7008n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-7010n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-7021The Graphics Drivers subsystem in Apple OS X before 10.11.1 allows local users to gain privileges or cause a denial of service (kernel memory corruption) via unspecified vectors
• CVE-2015-7007Script Editor in Apple OS X before 10.11.1 allows remote attackers to bypass an intended user-confirmation requirement for AppleScript execution via unspecified vectors
• CVE-2015-7015n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-7020n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-7061n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-6996n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-7023n/a: security vulnerability
• CVE-2015-7009n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-6995n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-6989n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-6994The kernel in Apple iOS before 9.1 and OS X before 10.11.1 mishandles reuse of virtual memory, which allows attackers to cause a denial of service via a crafted app
• CVE-2015-6985n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-6993n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-6977n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-6988n/a: security vulnerability
• CVE-2015-6984libarchive in Apple OS X before 10.11.1 allows attackers to write to arbitrary files via a crafted app that conducts an unspecified symlink attack
• CVE-2015-6987The File Bookmark component in Apple OS X before 10.11.1 allows local users to cause a denial of service (application crash) via crafted bookmark metadata in a folder
• CVE-2015-6983Double free vulnerability in Apple iOS before 9.1 and OS X before 10.11.1 allows attackers to write to arbitrary files via a crafted app that accesses AtomicBufferedFile descriptors
• CVE-2015-6991n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-6990n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-6978n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-6974n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-6992n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-6980Directory Utility in Apple OS X before 10.11.1 mishandles authentication for new sessions, which allows local users to gain privileges via unspecified vectors
• CVE-2015-6976n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-6837n/a: security vulnerability
• CVE-2015-6834n/a: security vulnerability
• CVE-2015-6838n/a: security vulnerability
• CVE-2015-6835n/a: security vulnerability
• CVE-2015-6836n/a: security vulnerability
• CVE-2015-5945The Sandbox subsystem in Apple OS X before 10.11.1 allows local users to gain privileges via vectors involving NVRAM parameters
• CVE-2015-5944CoreText in Apple OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file

Source and provenance

Original title: About the security content of OS X El Capitan 10.11.1, Security Update 2015-004 Yosemite, and Security Update 2015-007 Mavericks - Apple Support. Captured 17 Oct 2026, 14:11 UTC. The stored article is used for enrichment and change detection; BlackTree does not republish the publisher's full text here.