PT-2016-6103

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 10 Apple tvOS versions prior to 10 Apple iTunes versions prior to 12.5.1 on Windows Apple Safari versions prior to 10 Description The issue is related to how WebKit handles error prototypes, allowing remote attacker...

CVE-2016-4707

CFNetwork in Apple iOS before 10 and OS X before 10.12 mishandles Local Storage deletion, which allows local users to discover the visited web sites of arbitrary users via unspecified vectors...

CVE-2016-4733

WebKit in Apple iOS before 10, Safari before 10, and tvOS before 10 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2016-4611, CVE-2016-4730, CVE-2016-4734, and CVE-2016-4735...

CVE-2016-4724: NULL Pointer Dereference

IOAcceleratorFamily in Apple iOS before 10 and OS X before 10.12 allows attackers to execute arbitrary code in a privileged context or cause a denial of service NULL pointer dereference via a crafted app...

CVE-2016-4771: Exposure of Sensitive Information to an Unauthorized Actor

The kernel in Apple iOS before 10 and OS X before 10.12 allows local users to bypass intended file-access restrictions via a crafted directory pathname...

CVE-2016-4773: Out-of-bounds Read

The kernel in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows attackers to obtain sensitive memory-layout information or cause a denial of service out-of-bounds read via a crafted app, a different vulnerability than CVE-2016-4774 and CVE-2016-4776...

CVE-2016-4750: Improper Restriction of Operations within the Bounds of a Memory Buffer

S2 Camera in Apple iOS before 10 and OS X before 10.12 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

CVE-2016-4711: Improper Input Validation

CCrypt in corecrypto in CommonCrypto in Apple iOS before 10 and OS X before 10.12 allows attackers to discover cleartext information by leveraging a function call that specifies the same buffer for input and output...

PT-2016-6072

Name of the Vulnerable Software and Affected Versions Safari versions prior to 10 Apple iOS versions prior to 10 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via a crafted web site. This is also referred to as "Universal XSS...

CVE-2016-4725: Improper Restriction of Operations within the Bounds of a Memory Buffer

IOAcceleratorFamily in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows remote attackers to obtain sensitive information from process memory or cause a denial of service memory corruption via a crafted web site...

PT-2016-6097

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 10 Apple OS X versions prior to 10.12 Description The issue allows attackers to discover cleartext information by leveraging a function call that specifies the same buffer for input and output in CCrypt in corecrypt...

CVE-2016-4776: Out-of-bounds Read

The kernel in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows attackers to obtain sensitive memory-layout information or cause a denial of service out-of-bounds read via a crafted app, a different vulnerability than CVE-2016-4773 and CVE-2016-4774...

PT-2016-6085

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 10 Apple OS X versions prior to 10.12 Description The issue concerns the mishandling of process entitlement and Team ID values in the task port inheritance policy by AppleMobileFileIntegrity. This allows attackers t...

PT-2016-6130

The kernel in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows attackers to obtain sensitive memory-layout information or cause a denial of service out-of-bounds read via a crafted app, a different vulnerability than CVE-2016-4773 and CVE-2016-4776...

CVE-2016-4777: NULL Pointer Dereference

The kernel in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows attackers to execute arbitrary code in a privileged context or cause a denial of service invalid pointer dereference via a crafted app...

PT-2016-6113

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 10 Apple OS X versions prior to 10.12 Apple tvOS versions prior to 10 Apple watchOS versions prior to 3 Description The issue is related to the mishandling of signed disk images, allowing attackers to execute...

CVE-2016-4759: Improper Restriction of Operations within the Bounds of a Memory Buffer

WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2016-4765, CVE-2016-4766, CVE-2016-4767,...

PT-2016-6132

The kernel in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows attackers to obtain sensitive memory-layout information or cause a denial of service out-of-bounds read via a crafted app, a different vulnerability than CVE-2016-4773 and CVE-2016-4774...

CVE-2016-4731: Improper Restriction of Operations within the Bounds of a Memory Buffer

WebKit in Apple iOS before 10 and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2016-4729...

PT-2016-6116

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 10 iTunes versions prior to 12.5.1 on Windows Safari versions prior to 10 Description The issue allows remote attackers to obtain sensitive information via a crafted web site due to improper restriction of access to...