Apple iOS and Safari WebKit Memory Corruption Vulnerability (CNVD-2017-07602)

Apple iOS and Safari are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with Mac OS X and iOS operating systems; WebKit is an open-source web browser engine developed by KDE, Apple, Google,...

Apple iOS and Safari WebKit Memory Corruption Vulnerability (CNVD-2017-07610)

Apple iOS and Safari are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with Mac OS X and iOS operating systems; WebKit is an open-source web browser engine developed by KDE, Apple, Google,...

WebKit Component Memory Corruption Vulnerability in Multiple Apple Products (CNVD-2017-07722)

Apple iOS, Safari, and tvOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with Mac OS X and iOS operating systems; and tvOS is an operating system for smart TVs. webKit is an open source web...

WebKit Component Memory Corruption Vulnerability in Multiple Apple Products (CNVD-2017-07723)

Apple iOS, Safari, tvOS, and watchOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with Mac OS X and iOS operating systems; and tvOS is an operating system for smart TVs. WebKit is an open...

Apple macOS Sierra Multi-Touch Memory Corruption Vulnerability (CNVD-2017-08146)

Apple macOS is an operating system that runs on Apple's Macintosh line of computers. Apple macOS Sierra Multi-Touch suffers from a memory corruption vulnerability that can be exploited by remote attackers to build malicious apps and elevate privileges...

Apple iOS Security Security Bypass Vulnerability

Apple iOS is an operating system developed by Apple Inc. for mobile devices, of which Security is an information security and privacy component. A security bypass vulnerability exists in the Security component of Apple iOS versions prior to 10.3.2. An attacker can exploit this vulnerability to...

CVE-2017-6977

An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "Speech Framework" component. It allows attackers to conduct sandbox-escape attacks or cause a denial of service memory corruption via a crafted app...

Vulnerability of iOS and Mac OS X operating systems, allowing attackers to modify arbitrary command permissions

The vulnerability of the libarchive component in iOS and Mac OS X operating systems is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to modify arbitrary command permissions using unspecified vectors...

The vulnerability of the iOS operating system, which allows a perpetrator to obtain confidential information

The vulnerability of the SafariViewController component in the iOS operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to obtain confidential information by exploiting synchronization errors during cache cleanup...

The vulnerability of the iOS operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the iTunes Store web service’s iTunes sandbox component in the iOS operating system is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information ...

The vulnerability of the iOS operating system allows a hacker to obtain an Apple ID identifier.

The vulnerability of the iOS operating system’s Accounts component is related to the lack of protection for service data. Exploiting this vulnerability could allow a local attacker to obtain an Apple ID, by taking advantage of authentication vulnerabilities during a quick screen lock in iCloud...

Apple macOS Sierra libxslt has multiple memory corruption vulnerabilities

Apple macOS Sierra is a suite of specialized operating systems developed by Apple for Mac computers. libxslt is an XSLT XML Language for Defining XML Transformations C library developed for the GNOME project. Multiple memory corruption vulnerabilities exist in the libxslt component in Apple macOS...

The vulnerabilities in iOS and Mac OS X operating systems allow attackers to trigger service failures or execute arbitrary code in privileged contexts, thereby gaining access to sensitive information.

The vulnerability of the Kernel component in iOS and Mac OS X operating systems relates to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in a privileged context remotely, or to cause a service failure i.e., the use of resourc...

Vulnerabilities of iOS and Mac OS X operating systems, which allow attackers to trigger service failures or obtain confidential information

The vulnerability of the CoreText component in iOS and Mac OS X operating systems arises from the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to obtain confidential information or cause service failures such as reading...

The vulnerability of Safari browser and iOS operating system allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of the WebKit component in the Safari browser and the iOS operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure memory corruption,...

The vulnerabilities in iOS and Mac OS X operating systems allow attackers to trigger service failures or execute arbitrary code in privileged contexts.

The vulnerability of iOS and Mac OS X operating systems arises from operations that occur outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in privileged context, or cause a service failure memory corruption through a specially creat...

Apple macOS iBooks Sensitive Information Disclosure Vulnerability

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. iBooks is one of the e-book reading components. A sensitive information disclosure vulnerability exists in the iBooks component of Apple macOS versions prior to 10.12.4. The vulnerability can be exploited by ...

Apple macOS Sierra QuickTime Memory Corruption Vulnerability

Apple macOS Sierra is a specialized operating system developed by Apple for Mac computers.QuickTime is one of the multimedia playback components. A memory corruption vulnerability exists in the QuickTime component in Apple macOS Sierra versions prior to 10.12.4. A remote attacker can exploit this...

Multiple Apple Products WebKit Denial of Service Vulnerability (CNVD-2017-05144)

Apple iOS, Safari and tvOS are all products of Apple Inc. Apple iOS is a set of operating systems developed for mobile devices; Apple Safari is a web browser that comes with Mac OS X and iOS operating systems as the default browser; WebKit is a set of open source web browser engines developed by...

CVE-2017-2403

An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "Printing" component. A format-string vulnerability allows remote attackers to execute arbitrary code via a crafted ipp: or ipps: URL...