CVE-2016-4605

Calendar in Apple iOS before 9.3.3 allows remote attackers to cause a denial of service NULL pointer dereference and device restart via a crafted invitation...

CVE-2016-4610

CVE-2016-4610 affects libxslt in multiple Apple platforms: iOS (pre-9.3.3), OS X (pre-10.11.6), iTunes (pre-12.4.2 on Windows), iCloud (pre-5.2.1 on Windows), tvOS (pre-9.2.2), and watchOS (pre-2.2.2). The vulnerability allows remote attackers to cause a denial of service through memory corruptio...

CVE-2016-4585

Cross-site scripting XSS vulnerability in the WebKit Page Loading implementation in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to inject arbitrary web script or HTML via an HTTP response specifying redirection that is mishandled by Safari...

CVE-2016-4584

The provided connected documents identify CVE-2016-4584 as a WebKit Page Loading vulnerability in Apple iOS prior to 9.3.3, Safari prior to 9.1.2, and tvOS prior to 9.2.2. The root cause is memory corruption in WebKit Page Loading, allowing a remote attacker to execute arbitrary code or cause a d...

CVE-2016-4608

CVE-2016-4608 affects libxslt across Apple iOS (before 9.3.3), OS X (before 10.11.6), iTunes (before 12.4.2 on Windows), iCloud (before 5.2.1 on Windows), tvOS (before 9.2.2) and watchOS (before 2.2.2). The vulnerability permits remote memory corruption leading to denial of service and possibly o...

CVE-2016-4622

WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2016-4589, CVE-2016-4623, and CVE-2016-4624...

CVE-2016-4589

CVE-2016-4589 affects WebKit in Apple iOS prior to 9.3.3, Safari prior to 9.1.2, and tvOS prior to 9.2.2. The vulnerability allows a remote attacker to execute arbitrary code or cause a memory corruption-based denial of service via a crafted website. Root cause details are not expanded beyond mem...

CVE-2016-4583

WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to bypass the Same Origin Policy and obtain image date from an unintended web site via a timing attack involving an SVG document...

CVE-2016-4583

CVE-2016-4583 is a WebKit/SVG timing-based information disclosure in Apple WebKit components. Affected products include iOS prior to 9.3.3, Safari prior to 9.1.2, and tvOS prior to 9.2.2. The flaw enables a remote attacker to bypass the Same Origin Policy and obtain image data from a site the use...

CVE-2016-4592

WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to cause a denial of service memory consumption via a crafted web site...

CVE-2016-4651

CVE-2016-4651 affects WebKit JavaScript bindings in Apple iOS (before 9.3.3) and Safari (before 9.1.2). The vulnerability allows remote attackers to inject arbitrary web script or HTML via crafted HTTP/0.9 responses, related to a cross-protocol cross-site scripting (XPXSS) issue. Connected source...

CVE-2016-4585: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the WebKit Page Loading implementation in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to inject arbitrary web script or HTML via an HTTP response specifying redirection that is mishandled by Safari...

CVE-2016-4631: Improper Restriction of Operations within the Bounds of a Memory Buffer

ImageIO in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted TIFF file...

CVE-2016-4589: Improper Restriction of Operations within the Bounds of a Memory Buffer

WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2016-4622, CVE-2016-4623, and CVE-2016-4624...

PT-2016-6044

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.3.3 Apple tvOS versions prior to 9.2.2 Description The issue allows remote attackers to obtain sensitive information from uninitialized process memory via a crafted web site. Recommendations For Apple iOS versions...

PT-2016-6039

The kernel in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows local users to gain privileges or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2016-1863 and CVE-2016-4653...

CVE-2016-4608: Improper Restriction of Operations within the Bounds of a Memory Buffer

libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via unknown vectors...

CVE-2016-4615: Improper Restriction of Operations within the Bounds of a Memory Buffer

libxml2 in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via unknown vectors...

CVE-2016-4604: URL Redirection to Untrusted Site

Safari in Apple iOS before 9.3.3 allows remote attackers to spoof the displayed URL via an HTTP response specifying redirection to an invalid TCP port number...

PT-2016-2720

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.3.3 Apple OS X versions prior to 10.11.6 Apple tvOS versions prior to 9.2.2 Apple watchOS versions prior to 2.2.2 Description The issue is caused by a buffer overflow in the ImageIO component, allowing remote...