CVE-2016-1785

CVE-2016-1785 affects WebKit Page Loading in Apple iOS prior to 9.3 and Safari prior to 9.1. The root cause is incorrect character encoding handling when accessing cached data, which can allow a crafted website to bypass the Same Origin Policy and read cached data from a destination origin. The d...

CVE-2016-1757

Race condition in the kernel in Apple iOS before 9.3 and OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context via a crafted app...

CVE-2016-1783

CVE-2016-1783 affects WebKit in Apple iOS (pre-9.3), Safari (pre-9.1), and tvOS (pre-9.2). Description: remote attacker can cause memory corruption via a crafted web site, potentially enabling arbitrary code execution or a denial of service. Root cause: memory corruption in WebKit components expo...

CVE-2016-1779

CVE-2016-1779 affects WebKit in Apple iOS < 9.3 and Safari

CVE-2016-1761

CVE-2016-1761 affects libxml2 in Apple platforms and can be triggered by processing a crafted XML document. The connected Apple security content entries show that the vulnerability exists on iOS < 9.3, OS X < 10.11.4, and watchOS

CVE-2016-1778

WebKit in Apple iOS before 9.3 and Safari before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site...

CVE-2016-1782

WebKit in Apple iOS before 9.3 and Safari before 9.1 does not properly restrict redirects that specify a TCP port number, which allows remote attackers to bypass intended port restrictions via a crafted web site...

CVE-2016-1763

Messages in Apple iOS before 9.3 does not ensure that an auto-fill action applies to the intended message thread, which allows remote authenticated users to obtain sensitive information by providing a crafted sms: URL and reading a thread...

CVE-2016-1766

The Profiles component in Apple iOS before 9.3 does not properly validate certificates, which allows attackers to spoof an MDM profile trust relationship via unspecified vectors...

CVE-2016-1753

Multiple integer overflows in the kernel in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allow attackers to execute arbitrary code in a privileged context via a crafted app...

CVE-2016-1778

CVE-2016-1778 affects WebKit in Apple iOS before 9.3 and Safari before 9.1. Root cause is memory corruption in WebKit components triggered by a crafted website, enabling remote code execution or a denial of service. Reported severity is high (CVSSv3 base 8.8). The provided connected sources confi...

CVE-2016-1781

CVE-2016-1781 affects Apple WebKit in iOS before 9.3 and Safari before 9.1, where handling of attachment URLs could enable remote tracking of users via unspecified vectors. The Apple security content for Safari 9.1 (WebKit entry) indicates a concrete mitigation: a hidden web page may access devic...

Apple iOS WebKit Memory Corruption Vulnerability (CNVD-2016-01845)

Apple iOS, OS X and tvOS are operating systems from Apple Inc. Apple iOS is developed for mobile devices; OS X is developed for Mac computers; and tvOS is developed for smart TVs. A memory corruption vulnerability exists in WebKit in Apple iOS versions prior to 9.3, Safari versions prior to 9.1,...

Apple iOS/Safari Information Disclosure Vulnerability (CNVD-2016-01839)

Apple iOS is Apple's operating system for several smart devices.Apple Safari is an American Apple web browser that is the default browser that comes with the Mac OS X and iOS operating systems. The page load implementation in WebKit in Apple iOS before 9.3 and Safari before 9.1 fails to properly...

Apple iOS < 9.3 Multiple Vulnerabilities

Binary data appleios93check.nbin...

Apple iOS v9.2.1 - Multiple PassCode Bypass Vulnerabilities

Document Title: =============== Apple iOS v9.2.1 - Multiple PassCode Bypass Vulnerabilities References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1779 View Video: https://www.youtube.com/watch?v=-XLlpnjZXFM Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1778...

Machine Learning Linux IPS: Stratosphere

This is the linux version of the Stratosphere IPS, a behavioral-based intrusion detection and prevention system that uses machine learning algorithms to detect malicious behaviors. It is part of a larger suite of programs that include the Stratosphere Windows IPS and the Stratosphere Testing...

The vulnerabilities in operating systems such as Mac OS X and iOS allow attackers to trigger service failures or increase their privileges.

The vulnerability of the kernel in Mac OS X and iOS arises due to buffer overflows. Exploiting this vulnerability can allow an attacker to increase their privileges or cause a service failure memory corruption...

Apple IOS PDF Reader Parsing Memory Corruption (CVE-2014-4377)

A memory corruption vulnerability has been reported in Adobe Reader and Acrobat. The vulnerability is due to incorrect memory buffer allocation while parsing a corrupted PDF file. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted PDF file...

Apple iOS Application Update Loop Pass Code Bypass

Document Title: =============== Apple iOS v9.1, 9.2 & 9.2.1 - Application Update Loop Pass Code Bypass References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1710 Apple Follow-up ID: 631627909 Video: http://www.vulnerability-lab.com/getcontent.php?id=1711...