Memory corruption

WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2016-4765, CVE-2016-4766, CVE-2016-4767,...

Memory corruption

libxslt in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site...

Design/Logic Flaw

WKWebView in WebKit in Apple iOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 does not properly verify X.509 certificates from HTTPS servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Memory corruption

S2 Camera in Apple iOS before 10 and OS X before 10.12 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

UBUNTU-CVE-2016-4758

WebKit in Apple iOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 does not properly restrict access to the location variable, which allows remote attackers to obtain sensitive information via a crafted web site...

CVE-2016-4737

WebKit in Apple iOS before 10, Safari before 10, tvOS before 10, and watchOS before 3 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site...

CVE-2016-4729

WebKit in Apple iOS before 10 and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2016-4731...

CVE-2016-4750

S2 Camera in Apple iOS before 10 and OS X before 10.12 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

CVE-2016-4777

The kernel in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows attackers to execute arbitrary code in a privileged context or cause a denial of service invalid pointer dereference via a crafted app...

CVE-2016-4763

CVE-2016-4763 affects WKWebView in WebKit across Apple platforms (iOS before 10, Safari before 10) and iTunes before 12.5.1 on Windows. Root cause: certificate validation failure in WKWebView leads to improper verification of HTTPS X.509 certificates, enabling MITM attackers to spoof servers and ...

CVE-2016-4738

CVE-2016-4738 is a memory corruption vulnerability in libxslt. The issue occurs in the XSLT processing runtime library (libxslt) and could allow a remote attacker to execute arbitrary code or cause a denial of service when a crafted web page is processed. Debian’s security advisory DSA-3709-1 con...

CVE-2016-4767

CVE-2016-4767 affects WebKit used in Apple iOS (pre-10) , tvOS (pre-10) , iTunes (pre-12.5.1 on Windows) , and Safari (pre-10) . The root cause is memory corruption in WebKit that enables a remote attacker to execute arbitrary code or cause a denial of service via a crafted web site. The availabl...

CVE-2016-4758

CVE-2016-4758 affects WebKit components in Apple iOS prior to 10, iTunes prior to 12.5.1 on Windows, and Safari prior to 10. It is a permissions-based information disclosure vulnerability related to access to the location variable in WebKit that could leak sensitive data when visiting crafted sit...

CVE-2016-4711

The CVE-2016-4711 entry applies to CCrypt in corecrypto within CommonCrypto, affecting iOS before 10 and macOS before 10.12. Description: an input/output buffer aliasing issue allows an attacker to recover plaintext by a function call that uses the same buffer for input and output. Impact: inform...

CVE-2016-4712

CVE-2016-4712 affects CoreCrypto across Apple platforms (iOS before 10, macOS before 10.12, tvOS before 10, watchOS before 3). The vulnerability is an out-of-bounds write in CoreCrypto that could allow an attacker to execute arbitrary code or cause a denial of service via a crafted application. R...

CVE-2016-4750

CVE-2016-4750 — S2 Camera (Apple iOS <10 and OS X

CVE-2016-4768

CVE-2016-4768 affects WebKit components across Apple platforms: iOS prior to 10, tvOS prior to 10, Safari prior to 10, and iTunes on Windows prior to 12.5.1. The vulnerability is triggered by a crafted web site and results in remote code execution or memory corruption, with impact on confidential...

CVE-2016-4618

CVE-2016-4618 is a UXSS/XSS in Safari Reader affecting iOS prior to 10 and Safari prior to 10. The root cause is multiple input/validation flaws in Safari Reader that allow crafted pages to execute arbitrary script when loaded. Impact is remote code execution via a malicious webpage in the User’s...

CVE-2016-4733

CVE-2016-4733 affects WebKit in Apple iOS prior to 10, Safari prior to 10, and tvOS prior to 10. The issue allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted website. This is described as a distinct vulnerability from CVE-2016-4611, CV...

CVE-2016-4735

CVE-2016-4735 affects WebKit in Apple iOS before 10, Safari before 10, and tvOS before 10. The vulnerability allows an attacker to trigger remote code execution or a denial of service via a crafted web site, caused by memory corruption. Connected sources confirm the affected platforms and failure...