Apple iOS DataAccess Component Input Validation Vulnerability

Apple iOS is a set of operating systems developed by Apple for mobile devices, of which DataAccess is a data access component. A security vulnerability exists in the DataAccess component in Apple iOS versions prior to 10.3. A remote attacker could exploit this vulnerability to access Exchange...

Vulnerabilities of operating systems such as Mac OS X and iOS, which allow attackers to escalate their privileges or cause service interruptions.

The vulnerability of the CoreMedia External Displays component in operating systems Mac OS X and iOS is related to incorrect type conversion. Exploiting this vulnerability can allow an attacker to increase their privileges or cause a service failure due to mismatched types using undefined vectors...

Vulnerability of Mac OS X and iOS operating systems, allowing attackers to modify arbitrary files

The vulnerability of the libarchive component in Mac OS X and iOS systems is related to an incorrect definition of links before accessing files. Exploiting this vulnerability allows a malicious individual to modify arbitrary files by manipulating symlinks...

The vulnerability of the iOS operating system, which allows attackers to carry out XSS attacks

The vulnerability of the WebKit component of the iOS operating system exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform XSS attacks injection of malicious code on the Safari browser remotely...

Vulnerabilities of iOS and Mac OS X operating systems, allowing attackers to obtain confidential information

The vulnerability of the Kernel component in iOS and Mac OS X operating systems is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to obtain confidential information from the kernel’s memory through a specially...

The vulnerability of the Mac OS X operating system, which allows a hacker to increase their privileges

The vulnerability of the libxpc component during the launchctl process in the Mac OS X operating system is related to deficiencies in access control. Exploiting this vulnerability could allow an intruder to increase their privileges locally...

The vulnerability of the iOS operating system, which allows a hacker to facilitate the process of file decryption

The vulnerability of the iTunes Backup component in the iOS operating system is related to incorrect hashing of passwords. Exploiting this vulnerability can allow a malicious actor to facilitate the decryption process for files remotely...

The vulnerability of the multimedia player iTunes, the browser Safari, and the operating system iOS allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of the WebKit component in multimedia players like iTunes, Safari browsers, and the iOS operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service...

The vulnerability of the iOS operating system, which allows a perpetrator to access metadata related to audio recordings

The vulnerability of the Sandbox Profiles component of the iOS operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to metadata of audio recordings through a specially created...

The vulnerability of the iOS operating system, the multimedia player iTunes, and the browser Safari allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of the WebKit component of the iOS operating system, the multimedia player iTunes, and the browser Safari arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a servic...

The vulnerability of Safari browser, the iOS operating system, and the multimedia player iTunes allows attackers to trigger a service failure or execute arbitrary code.

The vulnerability of the WebKit component in the Safari browser and the iOS operating system, as well as in the multimedia player iTunes, arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or...

The vulnerability of the iOS operating system, which allows a hacker to bypass existing authentication policies

The vulnerability of the Accounts component in the iOS operating system is related to authentication errors. Exploiting this vulnerability allows a malicious actor to circumvent existing authentication policies by exploiting errors in the application uninstallation process...

Apple iOS WebSheet Component Sandbox Bypass Vulnerability

Apple iOS is an operating system for mobile devices developed by Apple Inc. in the United States. A security vulnerability exists in the WebSheet component of Apple iOS that could be exploited by a local attacker to bypass sandboxing restrictions...

CVE-2016-7759

An issue was discovered in certain Apple products. iOS before 10 is affected. The issue involves the "Springboard" component, which allows physically proximate attackers to obtain sensitive information by viewing application snapshots in the Task Switcher...

CVE-2016-7608

An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the "IOFireWireFamily" component, which allows local users to obtain sensitive information from kernel memory via unspecified vectors...

CVE-2016-4691

An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "FontParser" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption an...

CVE-2016-4667

An issue was discovered in certain Apple products. macOS before 10.12.1 is affected. The issue involves the "ATS" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted font...

CVE-2016-4617

An issue was discovered in certain Apple products. macOS before 10.12 is affected. The issue involves a sandbox escape related to launchctl process spawning in the "libxpc" component...

UBUNTU-CVE-2017-2365

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted...

Apple macOS Sierra IOSurface Component Memory Corruption Vulnerability

Apple macOS Sierra is a specialized operating system developed by Apple for Mac computers.IOSurface is one of the programming framework components. A security vulnerability exists in the IOSurface component in Apple macOS Sierra versions prior to 10.12.2. A local attacker could exploit the...