CVE-2016-4618

Cross-site scripting XSS vulnerability in Safari Reader in Apple iOS before 10 and Safari before 10 allows remote attackers to inject arbitrary web script or HTML via a crafted web site, aka "Universal XSS UXSS."...

CVE-2016-4768

CVE-2016-4768 affects WebKit components across Apple platforms: iOS prior to 10, tvOS prior to 10, Safari prior to 10, and iTunes on Windows prior to 12.5.1. The vulnerability is triggered by a crafted web site and results in remote code execution or memory corruption, with impact on confidential...

CVE-2016-4733

CVE-2016-4733 affects WebKit in Apple iOS prior to 10, Safari prior to 10, and tvOS prior to 10. The issue allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted website. This is described as a distinct vulnerability from CVE-2016-4611, CV...

CVE-2016-4731

WebKit in Apple iOS before 10 and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2016-4729...

CVE-2016-4729

WebKit in Apple iOS before 10 and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2016-4731...

CVE-2016-4722

The IDS - Connectivity component in Apple iOS before 10 and OS X before 10.12 allows man-in-the-middle attackers to conduct Call Relay spoofing attacks and cause a denial of service via unspecified vectors...

CVE-2016-4708

CVE-2016-4708 affects CFNetwork across Apple platforms (iOS before 10, OS X before 10.12, tvOS before 10, watchOS before 3). Root cause: input parsing/validation flaw in the Set-Cookie header handling that can disclose sensitive information via a crafted HTTP response. Impact: information disclos...

CVE-2016-4750

S2 Camera in Apple iOS before 10 and OS X before 10.12 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

CVE-2016-4722

CVE-2016-4722 affects Apple iOS prior to 10 and macOS (OS X) prior to 10.12 in the IDS - Connectivity component. The issue is a spoofing vulnerability in Call Relay handling that could enable a man-in-the-middle position to cause a denial of service. Apple’s security content notes this as a spoof...

CVE-2016-4712

CVE-2016-4712 affects CoreCrypto across Apple platforms (iOS before 10, macOS before 10.12, tvOS before 10, watchOS before 3). The vulnerability is an out-of-bounds write in CoreCrypto that could allow an attacker to execute arbitrary code or cause a denial of service via a crafted application. R...

CVE-2016-4759

CVE-2016-4759 affects WebKit in Apple iOS prior to 10, tvOS prior to 10, iTunes prior to 12.5.1 on Windows, and Safari prior to 10. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) through a crafted web site. It is described as a...

CVE-2016-4750

CVE-2016-4750 — S2 Camera (Apple iOS <10 and OS X

CVE-2016-4762

CVE-2016-4762 affects WebKit components in Apple iOS <10, iTunes <12.5.1 for Windows, iCloud <6.0 for Windows, and Safari

CVE-2016-4767

WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2016-4759, CVE-2016-4765, CVE-2016-4766,...

CVE-2016-4735

WebKit in Apple iOS before 10, Safari before 10, and tvOS before 10 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2016-4611, CVE-2016-4730, CVE-2016-4733, and CVE-2016-4734...

CVE-2016-4735

CVE-2016-4735 affects WebKit in Apple iOS before 10, Safari before 10, and tvOS before 10. The vulnerability allows an attacker to trigger remote code execution or a denial of service via a crafted web site, caused by memory corruption. Connected sources confirm the affected platforms and failure...

CVE-2016-4729

CVE-2016-4729 affects WebKit in Apple iOS before 10 and Safari before 10, enabling remote code execution or memory corruption via a crafted web site. Root cause involves parsing/memory handling in WebKit leading to memory corruption. Mitigation: apply updates to iOS 10 and Safari 10 (as per Apple...

CVE-2016-4758

CVE-2016-4758 affects WebKit components in Apple iOS prior to 10, iTunes prior to 12.5.1 on Windows, and Safari prior to 10. It is a permissions-based information disclosure vulnerability related to access to the location variable in WebKit that could leak sensitive data when visiting crafted sit...

CVE-2016-4760

WebKit in Apple iOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to conduct DNS rebinding attacks against non-HTTP Safari sessions by leveraging HTTP/0.9 support...

CVE-2016-4737

CVE-2016-4737 affects WebKit-based components in Apple platforms: iOS prior to 10, Safari prior to 10, tvOS prior to 10, and watchOS prior to 3. The vulnerability is a memory corruption issue in WebKit that could allow a remote attacker to execute arbitrary code or cause a denial of service via a...