Apple iOS < 11.0.1 Multiple Vulnerabilities

Binary data 700542.prm...

Apple iOS < 11.2.2 Multiple Vulnerabilities (Spectre, APPLE-SA-2018-1-8-1)

Binary data 700545.prm...

Apple iOS < 12.1.1 Multiple Vulnerabilities (APPLE-SA-2018-12-05-1)

Binary data 700555.prm...

Apple iOS < 11.1 Multiple Vulnerabilities

Binary data 700543.prm...

Apple iOS < 12.1.3 Multiple Vulnerabilities (APPLE-SA-2019-1-22-1)

Binary data 700556.prm...

Apple iOS < 11.2.5 Multiple Vulnerabilities (APPLE-SA-2018-1-23-1)

Binary data 700546.prm...

Apple iOS < 11.3.1 Multiple Vulnerabilities

Binary data 700549.prm...

SAS 2019: Exodus Spyware Found Targeting Apple iOS Users

SINGAPORE— The Exodus spyware that was recently found lurking in 25 different malicious apps on Google Play has been ported to the Apple iOS ecosystem. The surveillance package can exfiltrate contacts, take audio recordings and photos, track location data and more on mobile devices. Earlier this...

Apple iOS Core Bluetooth Component Memory Corruption Vulnerability

Apple iOS is an operating system for mobile devices developed by Apple Inc. Core Bluetooth is one of the core Bluetooth components. A security vulnerability exists in the Core Bluetooth component in Apple iOS versions prior to 11.4.1. The vulnerability can be exploited to execute arbitrary code...

CVE-2018-4397

Analytics data was sent using HTTP rather than HTTPS. This was addressed by sending analytics data using HTTPS. This issue affected versions prior to Apple Support 2.4 for iOS...

Apple iOS Wi-Fi Logic Flaw Vulnerability

Apple iOS is an operating system developed by Apple Inc. for mobile devices, with Wi-Fi as one of the wireless Internet components. A security vulnerability exists in the Wi-Fi component of Apple iOS versions prior to 12.2. The vulnerability can be exploited by an attacker to track a device using...

Unspecified Vulnerability in Apple iOS Exchange ActiveSync

Apple iOS is an operating system developed by Apple for mobile devices.Exchange ActiveSync is one of the Microsoft Exchange synchronization protocols. A security vulnerability exists in the Exchange ActiveSync component in Apple iOS versions prior to 12.2. No details of the vulnerability are...

Apple iOS < 12.2 Multiple Vulnerabilities

Binary data appleios122check.nbin...

CVE-2019-6206

An issue existed with autofill resuming after it was canceled. The issue was addressed with improved state management. This issue is fixed in iOS 12.1.3. Password autofill may fill in passwords after they were manually cleared...

Cyber Security Week in Review (Feb. 15, 2019)

Welcome to this week's Cyber Security Week in Review, where Cisco Talos runs down all of the news we think you need to know in the security world. For more news delivered to your inbox every week, sign up for our Threat Source newsletter here. Top headlines this week Email provider VFEmail says i...

Apple iOS Foundation Memory Corruption Vulnerability

Apple iOS is an operating system developed by Apple for mobile devices. A memory corruption vulnerability exists in Apple iOS Foundation, which allows local attackers to exploit the vulnerability to submit a special request for elevated privileges...

VulnCheck KEV: CVE-2019-7287

Apple iOS contains a memory corruption vulnerability which could allow an attacker to perform remote code execution...

Apple iOS < 12.1.4 Multiple Vulnerabilities

Binary data appleios1214check.nbin...

(Pwn2Own) Apple iOS mediaserverd crte Out-Of-Bounds Access Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Apple iOS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of crte...

(Pwn2Own) Apple iOS mediaserverd cypc Out-Of-Bounds Access Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Apple iOS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of cypc...