About the security content of OS X El Capitan 10.11.2, Security Update 2015-005 Yosemite, and Security Update 2015-008 Mavericks - Apple Support

Linked CVE reports

These are source relationships, not a claim that this article fixes every affected product or branch.

• CVE-2011-2895n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2012-1148n/a: security vulnerability
• CVE-2012-1147readfilemap.c in expat before 2.1.0 allows context-dependent attackers to cause a denial of service (file descriptor consumption) via a large number of crafted XML files
• CVE-2012-0876n/a: Uncontrolled Resource Consumption
• CVE-2015-7803n/a: security vulnerability
• CVE-2015-7804n/a: security vulnerability
• CVE-2015-7111n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-7110The Disk Images component in Apple OS X before 10.11.2 and tvOS before 9.1 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted disk image
• CVE-2015-7106The Intel Graphics Driver component in Apple OS X before 10.11.2 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors
• CVE-2015-7115n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-7112n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-7107QuickLook in Apple iOS before 9.2 and OS X before 10.11.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted iWork file
• CVE-2015-7109n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-7116n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-7108The Bluetooth HCI interface in Apple OS X before 10.11.2 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors
• CVE-2015-7105n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-7084n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-7073n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-7066n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-7058Apple iOS before 9.2, OS X before 10.11.2, and tvOS before 9.1 improperly validate keychain item ACLs, which allows attackers to obtain access to keychain items via a crafted app
• CVE-2015-7067IOThunderboltFamily in Apple OS X before 10.11.2 allows local users to cause a denial of service (NULL pointer dereference) via an unspecified userclient type
• CVE-2015-7083n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-7064n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-7076The Intel Graphics Driver component in Apple OS X before 10.11.2 allows local users to gain privileges or cause a denial of service (NULL pointer dereference) via unspecified vectors
• CVE-2015-7059n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-7075n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-7044n/a: security vulnerability
• CVE-2015-7042n/a: security vulnerability
• CVE-2015-7052kext tools in Apple OS X before 10.11.2 mishandles kernel-extension loading, which allows local users to gain privileges via unspecified vectors
• CVE-2015-7047The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to gain privileges via a crafted mach message that is misparsed
• CVE-2015-7040n/a: security vulnerability
• CVE-2015-7078Use-after-free vulnerability in Hypervisor in Apple OS X before 10.11.2 allows local users to gain privileges via vectors involving VM objects
• CVE-2015-7046n/a: Exposure of Sensitive Information to an Unauthorized Actor
• CVE-2015-7039n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-7060n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-7071The File Bookmark component in Apple OS X before 10.11.2 allows attackers to bypass a sandbox protection mechanism for app scoped bookmarks via a crafted pathname
• CVE-2015-7077The Intel Graphics Driver component in Apple OS X before 10.11.2 allows local users to gain privileges or cause a denial of service (out-of-bounds memory access) via unspecified vectors
• CVE-2015-7054n/a: security vulnerability
• CVE-2015-7094CFNetwork HTTPProtocol in Apple iOS before 9.2 and OS X before 10.11.2 allows man-in-the-middle attackers to bypass the HSTS protection mechanism via a crafted URL
• CVE-2015-7074n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-7068n/a: NULL Pointer Dereference
• CVE-2015-7053n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-7043n/a: security vulnerability
• CVE-2015-7081n/a: security vulnerability
• CVE-2015-7065n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-7041n/a: security vulnerability
• CVE-2015-7045Keychain Access in Apple OS X before 10.11.2 and tvOS before 9.1 improperly interacts with Keychain Agent, which allows attackers to spoof the Keychain Server via unspecified vectors
• CVE-2015-7061n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2015-7001n/a: security vulnerability
• CVE-2015-7062Apple OS X before 10.11.2 and tvOS before 9.1 allow local users to bypass intended configuration-profile installation restrictions via unspecified vectors

Source and provenance

Original title: About the security content of OS X El Capitan 10.11.2, Security Update 2015-005 Yosemite, and Security Update 2015-008 Mavericks - Apple Support. Captured 17 Oct 2026, 14:11 UTC. The stored article is used for enrichment and change detection; BlackTree does not republish the publisher's full text here.