Apple macOS Sierra Multi-Touch Memory Corruption Vulnerability (CNVD-2017-08146)

Apple macOS is an operating system that runs on Apple's Macintosh line of computers. Apple macOS Sierra Multi-Touch suffers from a memory corruption vulnerability that can be exploited by remote attackers to build malicious apps and elevate privileges...

Apple iOS Security Security Bypass Vulnerability

Apple iOS is an operating system developed by Apple Inc. for mobile devices, of which Security is an information security and privacy component. A security bypass vulnerability exists in the Security component of Apple iOS versions prior to 10.3.2. An attacker can exploit this vulnerability to...

CVE-2017-6977

An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "Speech Framework" component. It allows attackers to conduct sandbox-escape attacks or cause a denial of service memory corruption via a crafted app...

The vulnerability of the iOS operating system allows a hacker to obtain an Apple ID identifier.

The vulnerability of the iOS operating system’s Accounts component is related to the lack of protection for service data. Exploiting this vulnerability could allow a local attacker to obtain an Apple ID, by taking advantage of authentication vulnerabilities during a quick screen lock in iCloud...

Vulnerability of iOS and Mac OS X operating systems, allowing attackers to modify arbitrary command permissions

The vulnerability of the libarchive component in iOS and Mac OS X operating systems is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to modify arbitrary command permissions using unspecified vectors...

The vulnerability of the iOS operating system, which allows a perpetrator to obtain confidential information

The vulnerability of the SafariViewController component in the iOS operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to obtain confidential information by exploiting synchronization errors during cache cleanup...

The vulnerability of the iOS operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the iTunes Store web service’s iTunes sandbox component in the iOS operating system is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information ...

Apple macOS Sierra libxslt has multiple memory corruption vulnerabilities

Apple macOS Sierra is a suite of specialized operating systems developed by Apple for Mac computers. libxslt is an XSLT XML Language for Defining XML Transformations C library developed for the GNOME project. Multiple memory corruption vulnerabilities exist in the libxslt component in Apple macOS...

The vulnerability of Safari browser and iOS operating system allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of the WebKit component in the Safari browser and the iOS operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure memory corruption,...

Vulnerabilities of iOS and Mac OS X operating systems, which allow attackers to trigger service failures or obtain confidential information

The vulnerability of the CoreText component in iOS and Mac OS X operating systems arises from the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to obtain confidential information or cause service failures such as reading...

The vulnerabilities in iOS and Mac OS X operating systems allow attackers to trigger service failures or execute arbitrary code in privileged contexts.

The vulnerability of iOS and Mac OS X operating systems arises from operations that occur outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in privileged context, or cause a service failure memory corruption through a specially creat...

The vulnerabilities in iOS and Mac OS X operating systems allow attackers to trigger service failures or execute arbitrary code in privileged contexts, thereby gaining access to sensitive information.

The vulnerability of the Kernel component in iOS and Mac OS X operating systems relates to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in a privileged context remotely, or to cause a service failure i.e., the use of resourc...

Apple macOS iBooks Sensitive Information Disclosure Vulnerability

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. iBooks is one of the e-book reading components. A sensitive information disclosure vulnerability exists in the iBooks component of Apple macOS versions prior to 10.12.4. The vulnerability can be exploited by ...

Multiple Apple Products WebKit Denial of Service Vulnerability (CNVD-2017-05144)

Apple iOS, Safari and tvOS are all products of Apple Inc. Apple iOS is a set of operating systems developed for mobile devices; Apple Safari is a web browser that comes with Mac OS X and iOS operating systems as the default browser; WebKit is a set of open source web browser engines developed by...

Apple macOS Sierra QuickTime Memory Corruption Vulnerability

Apple macOS Sierra is a specialized operating system developed by Apple for Mac computers.QuickTime is one of the multimedia playback components. A memory corruption vulnerability exists in the QuickTime component in Apple macOS Sierra versions prior to 10.12.4. A remote attacker can exploit this...

CVE-2017-2403

An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "Printing" component. A format-string vulnerability allows remote attackers to execute arbitrary code via a crafted ipp: or ipps: URL...

UBUNTU-CVE-2017-2442

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "WebKit JavaScript Bindings" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site...

Apple iOS Pasteboard Component Key Encryption Vulnerability

Apple iOS is an operating system for mobile devices developed by Apple Inc. Pasteboard is a secure and standardized mechanism for exchanging data within and between applications. A security vulnerability exists in the Pasteboard component of Apple iOS versions prior to 10.3. An attacker could...

Apple iOS iTunes Store Component Sandbox Tampering Vulnerability

Apple iOS is an operating system developed by Apple Inc. for mobile devices. iTunes Store is a component of the iOS that is a digital media web store with a proprietary software interface. A security vulnerability exists in the iTunes Store component of Apple iOS versions prior to 10.3. An attack...

Apple iOS HomeKit component has unspecified vulnerability

Apple iOS is an operating system for mobile devices developed by Apple Inc. HomeKit is one of the smart home platform components. A security vulnerability exists in the HomeKit component of Apple iOS versions prior to 10.3. An attacker could exploit the vulnerability to display Home Control on th...