Sandbox Profiles Component Information Disclosure Vulnerability in Apple iOS/tvOS/WatchOS

Apple iOS, tvOS, and watchOS are products of Apple Inc. Apple iOS is an operating system for mobile devices; tvOS is a smart TV operating system; and watchOS is a smart watch operating system. sandbox Profiles is one of the sandbox components. Sandbox Profiles is one of the sandbox components. An...

CVE-2016-7852

Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before 15.020.20039 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...

The vulnerabilities in iOS and Mac OS X operating systems allow attackers to trigger service failures or obtain confidential information from the process memory.

The vulnerability of the IOAcceleratorFamily component in iOS and Mac OS X operating systems arises from operations that occur outside of the buffer in memory. Exploiting this vulnerability can allow a malicious actor to obtain confidential information from the process’s memory or cause a service...

Vulnerabilities of operating systems such as Mac OS X and iOS, which allow attackers to obtain confidential information from process memory

The vulnerability of the FontParser component in Mac OS X and iOS operating systems arises due to buffer overflow. Exploiting this vulnerability can allow a malicious actor to obtain confidential information from the process’s memory using a specially crafted font...

Apple OS X WindowServer Type Obfuscation Vulnerability

Apple OS X is a specialized operating system developed by Apple for Mac computers, of which WindowServer is a Window Service component. A type obfuscation vulnerability exists in WindowServer in Apple OS X versions prior to 10.12, which can be exploited by a local attacker to gain root privileges...

WebKit memory corruption vulnerability in multiple Apple products (CNVD-2016-08252)

Apple iOS, tvOS, iTunes, and Safari are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; tvOS is an operating system for smart TVs; iTunes is a suite of media player applications; and Safari is a web browser that comes as the default browser with Mac OS X and...

Apple iOS and OS X IOAcceleratorFamily Arbitrary Command Execution Vulnerability

Apple iOS and OS X are both operating systems from Apple Inc. Apple iOS is developed for mobile devices; Apple OS X is developed for Mac computers.IOAcceleratorFamily is one of the IO acceleration management components. An arbitrary command execution vulnerability exists in IOAcceleratorFamily in...

Apple OS X CoreDisplay Information Disclosure Vulnerability

Apple OS X is a specialized operating system developed by Apple for Mac computers, of which CoreDisplay is a core display component. An information disclosure vulnerability exists in CoreDisplay in Apple OS X versions prior to 10.12, which can be exploited by an attacker to view any user's screen...

CVE-2016-4754

ServerDocs Server in Apple OS X Server before 5.2 supports the RC4 cipher, which might allow remote attackers to defeat cryptographic protection mechanisms via unspecified vectors...

CVE-2016-4755

Terminal in Apple OS X before 10.12 uses weak permissions for the .bashhistory and .bashsession files, which allows local users to obtain sensitive information via unspecified vectors...

CVE-2016-4748

Perl in Apple OS X before 10.12 allows local users to bypass the taint-mode protection mechanism via a crafted environment variable...

CVE-2016-4739

mDNSResponder in Apple OS X before 10.12, when VMnet.framework is used, arranges for a DNS proxy to listen on all interfaces, which allows remote attackers to obtain sensitive information by sending a DNS query to an unintended interface...

CVE-2016-4735

WebKit in Apple iOS before 10, Safari before 10, and tvOS before 10 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2016-4611, CVE-2016-4730, CVE-2016-4733, and CVE-2016-4734...

CVE-2016-4717

The File Bookmark component in Apple OS X before 10.12 mishandles scoped-bookmark file descriptors, which allows attackers to cause a denial of service via a crafted app...

CVE-2016-4716

diskutil in DiskArbitration in Apple OS X before 10.12 allows local users to gain privileges via unspecified vectors...

CVE-2016-4713

CoreDisplay in Apple OS X before 10.12 allows attackers to view arbitrary users' screens by leveraging screen-sharing access...

Apple OS X Kernel Memory Corruption Vulnerability (CNVD-2016-08113)

Apple OS X is a specialized operating system developed by Apple for Mac computers, of which Kernel is a kernel component. A memory corruption vulnerability exists in the Kernel in Apple OS X version 10.11.6, which can be exploited by a specially crafted application to execute arbitrary code with...

Apple iOS WebKit Memory Corruption Vulnerability (CNVD-2016-08099)

Apple iOS is the United States Apple Apple company for mobile devices developed by a set of operating systems. WebKit is KDE, Apple Apple, Google Google and other companies jointly developed a set of open source Web browser engine, currently used by Apple Safari and Google Chrome and other...

Apple OS X kernel memory corruption vulnerability (CNVD-2016-08100)

Apple OS X is a specialized operating system developed by Apple for Mac computers. kernel is one of the kernel components. A memory corruption vulnerability exists in the kernel in Apple OS X version 10.11.6. A local attacker can exploit this vulnerability to execute arbitrary code with kernel...

Vulnerabilities of operating systems such as Mac OS X and iOS, which allow attackers to trigger service interruptions

The vulnerability of the ImageIO component in operating systems such as Mac OS X and iOS arises due to buffer overflow. Exploiting this vulnerability can allow a malicious actor to trigger a service failure memory consumption by using undefined vectors...