Every CVE Search/ Get API key

CVE-2015-7003

coreaudiod in Audio in Apple OS X before 10.11.1 does not initialize an unspecified data...

6.8 Medium

coreaudiod in Audio in Apple OS X before 10.11.1 does not initialize an unspecified data structure, which allows attackers to execute arbitrary code via a crafted app.

Exploit likelihood

1.81%Down 0.9 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 6.8

coreaudiod in Audio in Apple OS X before 10.11.1 does not initialize an unspecified data structure, which allows attackers to execute arbitrary code via a crafted app.

Record
CVE-2015-7003
CVSS 2.0
6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness
CWE-264
Updated
2026-11-02
CVE List No score

coreaudiod in Audio in Apple OS X before 10.11.1 does not initialize an unspecified data structure, which allows attackers to execute arbitrary code via a crafted app.

Record
CVE-2015-7003
Updated
2026-11-02
EUVDEUVD-2015-6935 No score

coreaudiod in Audio in Apple OS X before 10.11.1 does not initialize an unspecified data structure, which allows attackers to execute arbitrary code via a crafted app.

Record
EUVD-2015-6935
Updated
2026-11-03
GitHub AdvisoriesGHSA-95x4-w9x8-g2jp No score

coreaudiod in Audio in Apple OS X before 10.11.1 does not initialize an unspecified data...

coreaudiod in Audio in Apple OS X before 10.11.1 does not initialize an unspecified data structure, which allows attackers to execute arbitrary code via a crafted app.

Record
GHSA-95x4-w9x8-g2jp
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2015-7003 is a medium vulnerability (CVSS 6.8) in Apple Mac Os X, published October 23, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.81%, the 78th percentile. No source names a fixed version.

References

MoveEnter Open