CVE-2015-1067

Secure Transport in Apple iOS before 8.2, Apple OS X through 10.10.2, and Apple TV before 7.1 does not properly restrict TLS state transitions, which makes it easier for remote attackers to conduct cipher-downgrade attacks to EXPORT_RSA ciphers via crafted TLS traffic, related to the "FREAK" issue, a different vulnerability than CVE-2015-0204 and CVE-2015-1637.

• CWE-310

• http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.htmlVendor Advisory
• http://lists.apple.com/archives/security-announce/2015/Mar/msg00000.htmlVendor Advisory
• http://lists.apple.com/archives/security-announce/2015/Mar/msg00001.htmlVendor Advisory
• http://lists.apple.com/archives/security-announce/2015/Mar/msg00002.htmlVendor Advisory
• http://www.securityfocus.com/bid/73009
• http://www.securitytracker.com/id/1031829Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1031830Third Party Advisory, VDB Entry
• https://freakattack.com/Exploit
• https://support.apple.com/HT204413Vendor Advisory
• https://support.apple.com/HT204423Vendor Advisory
• https://support.apple.com/HT204426Vendor Advisory
• https://support.apple.com/HT204659Vendor Advisory
• https://support.apple.com/kb/HT204870
• http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.htmlVendor Advisory
• http://lists.apple.com/archives/security-announce/2015/Mar/msg00000.htmlVendor Advisory
• http://lists.apple.com/archives/security-announce/2015/Mar/msg00001.htmlVendor Advisory
• http://lists.apple.com/archives/security-announce/2015/Mar/msg00002.htmlVendor Advisory
• http://www.securityfocus.com/bid/73009
• http://www.securitytracker.com/id/1031829Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1031830Third Party Advisory, VDB Entry
• https://freakattack.com/Exploit
• https://support.apple.com/HT204413Vendor Advisory
• https://support.apple.com/HT204423Vendor Advisory
• https://support.apple.com/HT204426Vendor Advisory
• https://support.apple.com/HT204659Vendor Advisory
• https://support.apple.com/kb/HT204870

Published

Mar 11, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-1061IOSurface in Apple iOS before 8.2, Apple OS X through 10.10.…
• CVE-2015-1062MobileStorageMounter in Apple iOS before 8.2 and Apple TV be…
• CVE-2015-1063CoreTelephony in Apple iOS before 8.2 allows remote attacker…
• CVE-2015-1064Springboard in Apple iOS before 8.2 allows physically proxim…
• CVE-2015-1065Multiple buffer overflows in iCloud Keychain in Apple iOS be…
• CVE-2015-1066Off-by-one error in IOAcceleratorFamily in Apple OS X throug…
• CVE-2015-1068WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1…
• CVE-2015-1069WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1…
• CVE-2015-1070WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1…
• CVE-2015-1071WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1…
• CVE-2015-1072WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1…
• CVE-2015-1073WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1…