UBUNTU-CVE-2016-4651

Cross-site scripting XSS vulnerability in the WebKit JavaScript bindings in Apple iOS before 9.3.3 and Safari before 9.1.2 allows remote attackers to inject arbitrary web script or HTML via a crafted HTTP/0.9 response, related to a "cross-protocol cross-site scripting XPXSS" vulnerability...

UBUNTU-CVE-2016-4589

WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2016-4622, CVE-2016-4623, and CVE-2016-4624...

CVE-2016-4585

Cross-site scripting XSS vulnerability in the WebKit Page Loading implementation in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to inject arbitrary web script or HTML via an HTTP response specifying redirection that is mishandled by Safari...

CVE-2016-4623

WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2016-4589, CVE-2016-4622, and CVE-2016-4624...

UBUNTU-CVE-2016-4623

WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2016-4589, CVE-2016-4622, and CVE-2016-4624...

Apple iOS < 9.3.3 Multiple Vulnerabilities

Binary data appleios933check.nbin...

CVE-2016-1839

The xmlDictAddString function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted XML document...

CVE-2016-1836

Use-after-free vulnerability in the xmlDictComputeFastKey function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service via a crafted XML document...

CVE-2016-1834

Heap-based buffer overflow in the xmlStrncat function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted XML...

Design/Logic Flaw

The XSS auditor in WebKit, as used in Apple iOS before 9.3 and Safari before 9.1, does not properly handle redirects in block mode, which allows remote attackers to obtain sensitive information via a crafted URL...

CVE-2016-1864

CVE-2016-1864 affects WebKit’s XSS auditor used in Apple iOS before 9.3 and Safari before 9.1. The issue is that redirects are not properly handled when the auditor runs in block mode, allowing a crafted URL to leak sensitive information to remote attackers. This is a WebKit-level bug affecting h...

Vulnerabilities of iOS and Mac OS X operating systems, allowing attackers to trigger service interruptions

The vulnerability of the ImageIO component in iOS and Mac OS X operating systems is related to pointer dereferencing errors. Exploiting this vulnerability can allow a malicious actor to trigger a service failure dereferencing the zero pointer using a specially crafted image...

The vulnerabilities in iOS and Mac OS X operating systems allow attackers to trigger service failures or execute arbitrary code in privileged contexts.

The vulnerability of the Disk Images subsystem in iOS and Mac OS X operating systems arises due to buffer overflows. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in privileged context, or trigger a service failure memory corruption through a specially created...

Apple iOS < 9.3.2 Multiple Vulnerabilities

Binary data 9332.prm...

Apple iOS < 9.3 Multiple Vulnerabilities

Binary data 9331.prm...

Apple iOS < 9.2.1 Multiple Vulnerabilities

Binary data 9330.prm...

Apple iOS < 9.2 Multiple Vulnerabilities

Binary data 9329.prm...

Apple iOS Safari Information Disclosure Vulnerability (CNVD-2016-03485)

Apple iOS is an operating system on Apple phones. The Safari 'Clear History and Website Data' feature in Apple iOS fails to clear history, allowing attackers to exploit a vulnerability to build malicious web pages to trick users into parsing them, which can crash applications or execute arbitrary...

Apple iOS Accessibility Buffer Overflow Vulnerability

Apple iOS is an operating system on Apple phones. A buffer overflow vulnerability exists in Accessibility in Apple iOS, which allows an attacker to exploit the vulnerability to execute arbitrary code with system privileges...

Apple iOS/watchOS/tvOS and OS X El Capitan kernel arbitrary code execution vulnerability (CNVD-2016-03532)

Apple iOS, watchOS, OS X El Capitan, and tvOS are products of Apple Inc. Apple iOS is an operating system for mobile devices; watchOS is an operating system for smartwatches; and OS X El Capitan is a specialized operating system for Mac computers. tvOS is a kernel component; OS X El Capitan is a...