CVE-2015-7033

The Apple iWork application before 2.6 for iOS, Apple Keynote before 6.6, Apple Pages before 5.6, and Apple Numbers before 3.6 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted document.

• CWE-119

• http://lists.apple.com/archives/security-announce/2015/Oct/msg00000.htmlVendor Advisory
• http://www.securitytracker.com/id/1033823Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1033825Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1033826Third Party Advisory, VDB Entry
• https://support.apple.com/HT205373Vendor Advisory
• http://lists.apple.com/archives/security-announce/2015/Oct/msg00000.htmlVendor Advisory
• http://www.securitytracker.com/id/1033823Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1033825Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1033826Third Party Advisory, VDB Entry
• https://support.apple.com/HT205373Vendor Advisory

Published

Oct 18, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-7027Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2015-7028Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2015-7029Apple AirPort Base Station Firmware before 7.6.7 and 7.7.x b…
• CVE-2015-7030The Swift implementation in Apple Xcode before 7.1 mishandle…
• CVE-2015-7031The Web Service component in Apple OS X Server before 5.0.15…
• CVE-2015-7032The Apple iWork application before 2.6 for iOS, Apple Keynot…
• CVE-2015-7034The Apple iWork application before 2.6 for iOS and Apple Pag…
• CVE-2015-7035Apple Mac EFI before 2015-002, as used in OS X before 10.11.…
• CVE-2015-7036The fts3_tokenizer function in SQLite, as used in Apple iOS …
• CVE-2015-7037Directory traversal vulnerability in Mobile Backup in Photos…
• CVE-2015-7038Buffer overflow in libc in Apple iOS before 9.2, OS X before…
• CVE-2015-7039Buffer overflow in libc in Apple iOS before 9.2, OS X before…