4801 matches found
CVE-2016-4719
The GeoServices component in Apple iOS before 10 and watchOS before 3 does not properly restrict access to PlaceData information, which allows attackers to discover physical locations via a crafted application...
CVE-2016-4719
The CVE-2016-4719 entry affects Apple’s GeoServices component in iOS (pre-10) and watchOS (pre-3). The issue is a permissions/configuration flaw in PlaceData that allows an app to read sensitive location information. Apple’s security notes enumerate GeoServices/CVE-2016-4719 under watchOS 3 and i...
CVE-2016-4719: Exposure of Sensitive Information to an Unauthorized Actor
The GeoServices component in Apple iOS before 10 and watchOS before 3 does not properly restrict access to PlaceData information, which allows attackers to discover physical locations via a crafted application...
CVE-2016-4746: Exposure of Sensitive Information to an Unauthorized Actor
The Keyboards component in Apple iOS before 10 does not properly use a cache for auto-correct suggestions, which allows remote attackers to obtain sensitive information in opportunistic circumstances by leveraging an unintended correction...
CVE-2016-4747: Exposure of Sensitive Information to an Unauthorized Actor
Mail in Apple iOS before 10 mishandles certificates, which makes it easier for man-in-the-middle attackers to discover mail credentials via unspecified vectors...
CVE-2016-4741: Undefined Security Weakness
The Assets component in Apple iOS before 10 allows man-in-the-middle attackers to block software updates via vectors related to lack of an HTTPS session for retrieving updates...
CVE-2016-4740: Exposure of Sensitive Information to an Unauthorized Actor
Apple iOS before 10, when Handoff for Messages is used, does not ensure that a Messages signin has occurred before displaying messages, which might allow attackers to obtain sensitive information via unspecified vectors...
PT-2016-6101
Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 10 Apple watchOS versions prior to 3 Description The issue concerns the GeoServices component, which does not properly restrict access to PlaceData information. This allows attackers to discover physical locations v...
Apple iOS Security Restrictions Bypass Vulnerability
Apple iOS is an operating system developed by Apple for mobile devices. A security restriction bypass vulnerability exists in Assets in Apple iOS versions prior to 10. An attacker can exploit this vulnerability to bypass security restrictions, perform unauthorized actions, or obtain sensitive...
CVE-2016-4620: Exposure of Sensitive Information to an Unauthorized Actor
The Sandbox Profiles component in Apple iOS before 10 does not properly restrict access to directory metadata for SMS draft directories, which allows attackers to discover text-message recipients via a crafted app...
Apple iOS < 10.0.1 Kernel Memory Information Disclosure (Trident)
Binary data appleios1001check.nbin...
Apple iOS 9.3.x < 9.3.5 Multiple Vulnerabilities
Binary data 9548.prm...
PT-2016-3109
Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.3.2 Apple OS X versions prior to 10.11.5 Apple tvOS versions prior to 9.2.1 Description The issue is caused by a heap-based buffer overflow in the IOHIDFamily component, allowing attackers to execute arbitrary cod...
Memory corruption vulnerability in Apple iOS kernel
iOS is an operating system developed by Apple for mobile devices, and supported devices include iPhone, iPod touch, iPad, and Apple TV. A memory corruption vulnerability exists in the Apple iOS kernel prior to version 9.3.5, which can be exploited by an attacker to elevate privileges, execute...
CVE-2016-4657
WebKit in Apple iOS before 9.3.5 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site...
CVE-2016-4656
The kernel in Apple iOS before 9.3.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...
CVE-2016-4655
The kernel in Apple iOS before 9.3.5 allows attackers to obtain sensitive information from memory via a crafted app...
Memory corruption
The kernel in Apple iOS before 9.3.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...
