Multiple Apple Products WebKit Memory Corruption Vulnerability (CNVD-2018-07779)

Apple iOS and others are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with the Mac OS X and iOS operating systems. iCloud for Windows is a cloud service based on the Windows platform. WebKit is...

CVE-2018-4172

An issue was discovered in certain Apple products. iOS before 11.3 is affected. The issue involves the "Find My iPhone" component. It allows physically proximate attackers to bypass the iCloud password requirement for disabling the "Find My iPhone" feature via vectors involving a backup restore...

CVE-2017-7075

An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Notes" component. It allows local users to obtain sensitive information by reading search results that contain locked-note content...

CVE-2017-7065

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. The issue involves the "Wi-Fi" component. It allows remote attackers to execute arbitrary code on the Wi-Fi chip or cause a denial of service memory...

CVE-2017-13877

An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Sandbox Profiles" component. It allows attackers to determine whether arbitrary files exist via a crafted app...

PT-2018-16419

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 11.3 Apple Safari versions prior to 11.1 Apple iCloud versions prior to 7.4 on Windows Apple iTunes versions prior to 12.7.4 on Windows Apple tvOS versions prior to 11.3 Description The issue involves the WebKit...

PT-2018-16408

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 11.3 Apple Safari versions prior to 11.1 Apple iCloud versions prior to 7.4 on Windows Apple iTunes versions prior to 12.7.4 on Windows Apple tvOS versions prior to 11.3 Description The issue involves the WebKit...

PT-2018-16434

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 11.3 Apple Safari versions prior to 11.1 Apple iCloud versions prior to 7.4 on Windows Apple iTunes versions prior to 12.7.4 on Windows Apple tvOS versions prior to 11.3 Apple watchOS versions prior to 4.3 Descripti...

Apple iOS < 11.3 Multiple Vulnerabilities

Binary data appleios113check.nbin...

PT-2018-16416

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 11.3 Apple Safari versions prior to 11.1 Apple iCloud versions prior to 7.4 on Windows Apple iTunes versions prior to 12.7.4 on Windows Apple tvOS versions prior to 11.3 Description The issue involves the WebKit...

PT-2018-16405

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 11.3 Apple macOS versions prior to 10.13.4 Apple tvOS versions prior to 11.3 Apple watchOS versions prior to 4.3 Description The issue involves CFPreferences in the System Preferences component and allows attackers ...

PT-2018-16378

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 11.2.5 Apple macOS versions prior to 10.13.3 Apple tvOS versions prior to 11.2.5 Apple watchOS versions prior to 4.2.2 Description The issue involves the Security component and allows remote attackers to spoof...

CVE-2018-4146

An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "WebKit"...

Apple iOS Files Widget Information Disclosure Vulnerability

Apple iOS is an operating system developed by Apple for mobile devices, and Files Widget is one of the file tool components. A security vulnerability exists in the Files Widget component in Apple iOS versions prior to 11.3, which can be exploited to obtain sensitive information by displaying cach...

QR Code Bug in Apple iOS 11 Could Lead You to Malicious Sites

A new vulnerability has been disclosed in iOS Camera App that could be exploited to redirect users to a malicious website without their knowledge. The vulnerability affects Apple's latest iOS 11 mobile operating system for iPhone, iPad, and iPod touch devices and resides in the built-in QR code...

Apple iOS v11.2.6 - Camera App QR Spoofing Vulnerability

Document Title: =============== Apple iOS v11.2.6 - Camera App QR Spoofing Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2124 Video: https://www.youtube.com/watch?v=WrgUo4hWyO8 Release Date: ============= 2018-03-28 Vulnerability Laboratory ID VL-ID:...

Apple iOS v11.2.6 - Camera App QR Spoofing Vulnerability

Document Title: =============== Apple iOS v11.2.6 - Camera App QR Spoofing Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2124 Video: https://www.youtube.com/watch?v=WrgUo4hWyO8 Release Date: ============= 2018-03-27 Vulnerability Laboratory ID VL-ID:...

Apple iOS, tvOS and watchOS Core Bluetooth Memory Corruption Vulnerability

Apple iOS, tvOS, and watchOS are all products of Apple Inc. Apple iOS is an operating system for mobile devices; tvOS is a smart TV operating system; and watchOS is a smart watch operating system. core Bluetooth is one of the core Bluetooth components. A security vulnerability exists in the Core...

Apple iOS < 11.2.6 Telugu Character Handling Remote Memory Corruption Vulnerability

Binary data appleios1126check.nbin...

(Pwn2Own) Apple iOS backboardd Untrusted Pointer Dereference Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Apple iOS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the backboardd service...