Apple macOS High Sierra Kernel Arbitrary Code Execution Vulnerability

Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers.Kernel is one of the kernel components. An arbitrary code execution vulnerability exists in the Kernel component of Apple macOS High Sierra versions prior to 10.13.1. An attacker can exploit this...

CVE-2017-7123

An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the third-party "file" product. Versions before 5.30 allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact...

CVE-2017-7138

An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "Directory Utility" component. It allows local users to discover the Apple ID of the computer's owner...

Apple iOS Phone Information Disclosure Vulnerability

Apple iOS is an operating system for mobile devices developed by Apple Inc. in the U.S. Phone is one of the components that provides telephony functionality. A security vulnerability exists in the Phone component in versions of Apple iOS prior to 11. This vulnerability can be exploited by a local...

Apple iOS Wi-Fi Component Arbitrary Code Execution Vulnerability (CNVD-2017-32732)

Apple iOS is an operating system for Apple smart devices. A security vulnerability in the Wi-Fi component of Apple iOS allows remote attackers to exploit the vulnerability to execute arbitrary code...

Microsoft Xamarin.iOS Elevation of Privilege Vulnerability

Microsoft Xamarin.iOS running macOS is a set of iOS application development tools for the macOS platform from Microsoft.Xamarin.iOS update component is one of the update components. The Microsoft Xamarin.iOS update component running on Apple macOS is vulnerable to a privilege extraction...

The vulnerability of the Safari browser component, the iOS operating system, and the multimedia player iTunes allows a hacker to trigger a service failure or execute arbitrary code in a privileged context.

The vulnerability of the Safari browser component, the iOS operating system, and the multimedia player iTunes is due to an operation that goes beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in a privileged context, or to cause ...

The vulnerability of the Kernel component in Mac OS X and iOS operating systems allows attackers to trigger service failures or execute arbitrary code in privileged contexts.

The vulnerability of the Kernel component in Mac OS X and iOS operating systems arises from the execution of an operation outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in privileged context, or cause a service failure memory...

Apple macOS Sierra Bluetooth memory corruption vulnerability (CNVD-2017-16955)

Apple macOS Sierra is a specialized operating system developed by Apple for Mac computers.Bluetooth is one of the Bluetooth components. A memory corruption vulnerability exists in the Bluetooth component of Apple macOS Sierra versions prior to 10.12.6. An attacker can exploit this vulnerability...

Apple macOS Sierra Audio memory corruption vulnerability

Apple macOS Sierra is a specialized operating system developed by Apple Inc. for Mac computers.The audio component is one of the audio components. A memory corruption vulnerability exists in the Audio component of Apple macOS Sierra before 10.12.6. A remote attacker can exploit this vulnerability...

Multiple Apple products WebKit cross-site scripting vulnerability (CNVD-2017-17204)

Apple iOS, Safari, and tvOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with Mac OS X and iOS operating systems; and tvOS is an operating system for smart TVs. webKit is an open source web...

Kernel Security Bypass Vulnerability in Multiple Apple Products (CNVD-2017-16876)

Apple iOS, macOS Sierra, tvOS, and watchOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; watchOS is a smartwatch operating system. kernel is a kernel component. The Kernel is one of the kernel components. A security vulnerability exists in the Kernel...

CVE-2017-7033

An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "afclip" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted audio file...

UBUNTU-CVE-2017-7011

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to spoof the address bar via a crafted web site that uses FRAME elements...

CVE-2017-9562

The Freedom First freedom-1st-credit-union-mobile-banking/id1085229458 app 3.0.0 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Apple iOS and macOS Sierra SQLite Memory Corruption Vulnerability

Apple iOS and macOS Sierra are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices; macOS Sierra is a specialized operating system developed for Mac computers; SQLite is a C-based, open source, embedded relational database management component developed by D...

Apple iOS and Safari WebKit Memory Corruption Vulnerability (CNVD-2017-07602)

Apple iOS and Safari are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with Mac OS X and iOS operating systems; WebKit is an open-source web browser engine developed by KDE, Apple, Google,...

WebKit Component Memory Corruption Vulnerability in Multiple Apple Products (CNVD-2017-07723)

Apple iOS, Safari, tvOS, and watchOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with Mac OS X and iOS operating systems; and tvOS is an operating system for smart TVs. WebKit is an open...

Apple iOS and Safari WebKit Memory Corruption Vulnerability (CNVD-2017-07610)

Apple iOS and Safari are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with Mac OS X and iOS operating systems; WebKit is an open-source web browser engine developed by KDE, Apple, Google,...

WebKit Component Memory Corruption Vulnerability in Multiple Apple Products (CNVD-2017-07722)

Apple iOS, Safari, and tvOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with Mac OS X and iOS operating systems; and tvOS is an operating system for smart TVs. webKit is an open source web...