CVE-2016-4656

The kernel in Apple iOS before 9.3.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

Apple iOS 9.3.x < 9.3.4 Multiple Vulnerabilities

Binary data 9481.prm...

CVE-2016-4654

IOMobileFrameBuffer in Apple iOS before 9.3.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

Memory corruption

IOMobileFrameBuffer in Apple iOS before 9.3.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

CVE-2016-4654

CVE-2016-4654 affects Apple iOS before 9.3.4 in IOMobileFrameBuffer. A memory corruption vulnerability could allow a crafted app to execute arbitrary code with kernel privileges or cause a denial of service. Root cause: memory corruption in IOMobileFrameBuffer. Impact is kernel-level compromise o...

VulnCheck KEV: CVE-2016-4657

Apple iOS WebKit contains a memory corruption vulnerability that allows attackers to execute remote code or cause a denial-of-service DoS via a crafted web site. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products...

Apple iOS < 9.3.4 IOMobileFrameBuffer Arbitrary Code Execution

Binary data appleios934check.nbin...

Apple iOS 9.x < 9.3 RCE

Binary data 9443.prm...

Apple iOS 9.3.x < 9.3.3 Multiple Vulnerabilities

Binary data 9445.prm...

Apple iOS 9.x < 9.1 Multiple Vulnerabilities

Binary data 9442.prm...

Multiple Apple Products Siri Contacts Component Information Disclosure Vulnerability

Apple iOS is an operating system developed by Apple Inc. for mobile devices.Siri is an intelligent voice control component.Siri Contacts is the component of Siri that is used to access private contact information.Siri Contacts is the component of Siri that is used to access private contact...

Apple iOS Information Disclosure Vulnerability (CNVD-2016-05745)

Apple iOS is an operating system developed for mobile devices. The Web Media Safari View Controller in Apple iOS fails to properly handle user data, allowing remote attackers to exploit the vulnerability to build malicious web pages that could be parsed to obtain sensitive video URL information...

CVE-2016-4651

Cross-site scripting XSS vulnerability in the WebKit JavaScript bindings in Apple iOS before 9.3.3 and Safari before 9.1.2 allows remote attackers to inject arbitrary web script or HTML via a crafted HTTP/0.9 response, related to a "cross-protocol cross-site scripting XPXSS" vulnerability...

Cross site scripting

Cross-site scripting XSS vulnerability in the WebKit JavaScript bindings in Apple iOS before 9.3.3 and Safari before 9.1.2 allows remote attackers to inject arbitrary web script or HTML via a crafted HTTP/0.9 response, related to a "cross-protocol cross-site scripting XPXSS" vulnerability...

CVE-2016-4632

ImageIO in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denial of service memory consumption via unspecified vectors...

CVE-2016-4631

ImageIO in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted TIFF file...

CVE-2016-4628

IOAcceleratorFamily in Apple iOS before 9.3.3 and watchOS before 2.2.2 allows local users to obtain sensitive information from kernel memory or cause a denial of service out-of-bounds read via unspecified vectors...

CVE-2016-4624

WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2016-4589, CVE-2016-4622, and CVE-2016-4623...

CVE-2016-4622

WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2016-4589, CVE-2016-4623, and CVE-2016-4624...

CVE-2016-4622

WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2016-4589, CVE-2016-4623, and CVE-2016-4624...