The kernel in Apple iOS before 9.1 and OS X before 10.11.1 does not initialize an unspecified data structure, which allows remote attackers to execute arbitrary code via vectors involving an unknown network-connectivity requirement.
Base Score: 10
Impact Score: 10
Exploitability Score: 10
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* versions up to 9.0.2 (inclusive)
cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:* versions up to 10.11.0 (inclusive)
View all (4 total)