Unspecified Vulnerability in Apple iOS and macOS Sierra 802.1X

Apple iOS and macOS Sierra are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; macOS Sierra is a specialized operating system developed for Mac computers. 802.1X is one of the Client or Server-based access control and authentication protocol components. A...

CVE-2017-7106

An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. The issue involves the "WebKit" component. It allows remote attackers to spoof the address bar...

Design/Logic Flaw

An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Phone" component. It allows attackers to obtain sensitive information by leveraging a timing bug to read a secure-content screenshot that occurred during a locking action...

Unspecified Vulnerability in Apple iOS Security

Apple iOS is an operating system developed by Apple Inc. for mobile devices, of which Security is an information security and privacy component. An unspecified vulnerability exists in the Security component of Apple iOS prior to version 11. The vulnerability can be exploited by an attacker to tra...

Apple iOS 10.2 (14C92) - Remote Code Execution

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1317c3 The exploit achieves R/W access to the host's physical memory. This exploit has been tested on the iPhone 7, iOS 10.2 14C92. To run the exploit against different devices or versions, the symbols must be adjusted. The attache...

Apple iOS < 11.0.1 Unspecifified Vulnerability

Binary data appleios1101check.nbin...

Memory Corruption Vulnerability in WebKit Component of Multiple Apple Products (CNVD-2017-29710)

Apple iOS, Safari, and tvOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with Mac OS X and iOS operating systems; and tvOS is an operating system for smart TVs. webKit is an open source web...

PT-2017-17504

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 11 Apple Safari versions prior to 11 Apple iCloud versions prior to 7.0 on Windows Apple iTunes versions prior to 12.7 on Windows Apple tvOS versions prior to 11 Description The issue involves the WebKit component a...

Apple iOS 10.2 - Broadcom Out-of-Bounds Write when Handling 802.11k Neighbor Report Response

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1289 The exploit gains code execution on the Wi-Fi firmware on the iPhone 7. The exploit has been tested against the Wi-Fi firmware as present on iOS 10.2 14C92, but should work on all versions of iOS up to 10.3.3 included. However...

Apple iOS Wi-Fi Component Arbitrary Code Execution Vulnerability

Apple iOS is an operating system for Apple smart devices. A security vulnerability exists in the Wi-Fi component of Apple iOS, which allows remote attackers in wireless networks to exploit the vulnerability to execute arbitrary code...

Apple iOS Wi-Fi Component Arbitrary Code Execution Vulnerability (CNVD-2017-32729)

Apple iOS is an operating system for Apple smart devices. A security vulnerability in the Wi-Fi component of Apple iOS allows remote attackers to exploit the vulnerability to execute arbitrary code...

Apple iOS Wi-Fi Component Arbitrary Code Execution Vulnerability (CNVD-2017-32731)

Apple iOS is an operating system for Apple smart devices. A security vulnerability in the Wi-Fi component of Apple iOS allows remote attackers to exploit the vulnerability to execute arbitrary code...

Apple iOS < 11 Multiple Vulnerabilities

Binary data appleios110check.nbin...

How to: Protect Systems From BlueBorne Attacks?

PenTestIT RSS Feed No matter what part of the world you live in, I'm sure that you must have at least heard about the latest Bluetooth attack making rounds - BlueBorne. I'm also sure that if you have a vulnerable device and you have some time until your vendor releases a patch remediating this...

CVE-2017-14315

In Apple iOS 7 through 9, due to a BlueBorne flaw in the implementation of LEAP Low Energy Audio Protocol, a large audio command can be sent to a targeted device and lead to a heap overflow with attacker-controlled data. Since the audio commands sent via LEAP are not properly validated, an attack...

CVE-2017-14315: Improper Restriction of Operations within the Bounds of a Memory Buffer

In Apple iOS 7 through 9, due to a BlueBorne flaw in the implementation of LEAP Low Energy Audio Protocol, a large audio command can be sent to a targeted device and lead to a heap overflow with attacker-controlled data. Since the audio commands sent via LEAP are not properly validated, an attack...

PT-2017-2792

Name of the Vulnerable Software and Affected Versions Apple iOS versions 7 through 9 Description The issue is related to a flaw in the implementation of the Low Energy Audio Protocol LEAP in Apple iOS, which can lead to a heap overflow with attacker-controlled data when a large audio command is...

Zerodium Offers $500K for Secure Messaging App Zero Days

Zerodium, a vendor operating in the nebulous exploit acquisition market, has put a premium on zero-day vulnerabilities in secure messaging applications in a new pricing structure announced today. Remote code execution and local privilege elevation zero days in messaging apps such as WhatsApp,...

CVE-2017-8248

A buffer overflow may occur in the processing of a downlink NAS message in Qualcomm Telephony as used in Apple iPhone 5 and later, iPad 4th generation and later, iPod touch 6th generation...

Apple iOS 10.3 - UI SMS Access Permission Vulnerability

Document Title: =============== Apple iOS 10.3 - UI SMS Access Permission Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2078 Apple Security ID: 666589482 Video: https://www.vulnerability-lab.com/getcontent.php?id=2079 Vulnerability...