CVE-2015-1092

NSXMLParser in Foundation in Apple iOS before 8.3 and Apple TV before 7.2 allows remote attackers to read arbitrary files via an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

• http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.htmlVendor Advisory
• http://lists.apple.com/archives/security-announce/2015/Apr/msg00003.htmlVendor Advisory
• http://www.securityfocus.com/bid/73983
• http://www.securitytracker.com/id/1032050
• https://support.apple.com/HT204661Vendor Advisory
• https://support.apple.com/HT204662Vendor Advisory
• https://support.apple.com/kb/HT204870
• http://lists.apple.com/archives/security-announce/2015/Apr/msg00002.htmlVendor Advisory
• http://lists.apple.com/archives/security-announce/2015/Apr/msg00003.htmlVendor Advisory
• http://www.securityfocus.com/bid/73983
• http://www.securitytracker.com/id/1032050
• https://support.apple.com/HT204661Vendor Advisory
• https://support.apple.com/HT204662Vendor Advisory
• https://support.apple.com/kb/HT204870

Published

Apr 10, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-1086The Audio Drivers subsystem in Apple iOS before 8.3 and Appl…
• CVE-2015-1087Directory traversal vulnerability in Backup in Apple iOS bef…
• CVE-2015-1088CFURL in Apple iOS before 8.3 and Apple OS X before 10.10.3 …
• CVE-2015-1089CFNetwork in Apple iOS before 8.3 and Apple OS X before 10.1…
• CVE-2015-1090CFNetwork in Apple iOS before 8.3 does not delete HTTP Stric…
• CVE-2015-1091The CFNetwork Session component in Apple iOS before 8.3 and …
• CVE-2015-1093FontParser in Apple iOS before 8.3 and Apple OS X before 10.…
• CVE-2015-1094IOAcceleratorFamily in Apple iOS before 8.3 and Apple TV bef…
• CVE-2015-1095IOHIDFamily in Apple iOS before 8.3, Apple OS X before 10.10…
• CVE-2015-1096IOHIDFamily in Apple iOS before 8.3, Apple OS X before 10.10…
• CVE-2015-1097IOMobileFramebuffer in Apple iOS before 8.3 and Apple TV bef…
• CVE-2015-1098iWork in Apple iOS before 8.3 and Apple OS X before 10.10.3 …7.3