CVE-2016-1780

WebKit in Apple iOS before 9.3 does not prevent hidden web views from reading orientation and motion data, which allows remote attackers to obtain sensitive information about a device's physical environment via a crafted web site...

UBUNTU-CVE-2016-1780

WebKit in Apple iOS before 9.3 does not prevent hidden web views from reading orientation and motion data, which allows remote attackers to obtain sensitive information about a device's physical environment via a crafted web site...

Design/Logic Flaw

The Page Loading implementation in WebKit in Apple iOS before 9.3 and Safari before 9.1 mishandles character encoding during access to cached data, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site...

Memory corruption

WebKit in Apple iOS before 9.3 and Safari before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site...

Memory corruption

WebKit in Apple iOS before 9.3, Safari before 9.1, and tvOS before 9.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site...

Information disclosure

Messages in Apple iOS before 9.3 does not ensure that an auto-fill action applies to the intended message thread, which allows remote authenticated users to obtain sensitive information by providing a crafted sms: URL and reading a thread...

CVE-2016-1783

CVE-2016-1783 affects WebKit in Apple iOS (pre-9.3), Safari (pre-9.1), and tvOS (pre-9.2). Description: remote attacker can cause memory corruption via a crafted web site, potentially enabling arbitrary code execution or a denial of service. Root cause: memory corruption in WebKit components expo...

CVE-2016-1753

Multiple integer overflows in the kernel in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allow attackers to execute arbitrary code in a privileged context via a crafted app...

CVE-2016-1782

CVE-2016-1782 affects WebKit in Apple iOS before 9.3 and Safari before 9.1. The issue arises because redirects that specify a TCP port number are not properly restricted, enabling a remote attacker to bypass intended port restrictions via a crafted website. Impact per provided sources is that thi...

CVE-2016-1781

CVE-2016-1781 affects Apple WebKit in iOS before 9.3 and Safari before 9.1, where handling of attachment URLs could enable remote tracking of users via unspecified vectors. The Apple security content for Safari 9.1 (WebKit entry) indicates a concrete mitigation: a hidden web page may access devic...

CVE-2016-1785

CVE-2016-1785 affects WebKit Page Loading in Apple iOS prior to 9.3 and Safari prior to 9.1. The root cause is incorrect character encoding handling when accessing cached data, which can allow a crafted website to bypass the Same Origin Policy and read cached data from a destination origin. The d...

CVE-2016-1778

WebKit in Apple iOS before 9.3 and Safari before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site...

CVE-2016-1757

Race condition in the kernel in Apple iOS before 9.3 and OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context via a crafted app...

CVE-2016-1766

The Profiles component in Apple iOS before 9.3 does not properly validate certificates, which allows attackers to spoof an MDM profile trust relationship via unspecified vectors...

CVE-2016-1763

Messages in Apple iOS before 9.3 does not ensure that an auto-fill action applies to the intended message thread, which allows remote authenticated users to obtain sensitive information by providing a crafted sms: URL and reading a thread...

CVE-2016-1761

CVE-2016-1761 affects libxml2 in Apple platforms and can be triggered by processing a crafted XML document. The connected Apple security content entries show that the vulnerability exists on iOS < 9.3, OS X < 10.11.4, and watchOS

CVE-2016-1778

CVE-2016-1778 affects WebKit in Apple iOS before 9.3 and Safari before 9.1. Root cause is memory corruption in WebKit components triggered by a crafted website, enabling remote code execution or a denial of service. Reported severity is high (CVSSv3 base 8.8). The provided connected sources confi...

CVE-2016-1782

WebKit in Apple iOS before 9.3 and Safari before 9.1 does not properly restrict redirects that specify a TCP port number, which allows remote attackers to bypass intended port restrictions via a crafted web site...

CVE-2016-1784

CVE-2016-1784 affects WebKit History handling in Apple iOS before 9.3, Safari before 9.1, and tvOS before 9.2, enabling remote websites to cause resource exhaustion and a crash (DoS). Root cause: flaws in History/web content handling within WebKit. Affected products: iOS Safari/WebKit and tvOS. M...

CVE-2016-1784

The History implementation in WebKit in Apple iOS before 9.3, Safari before 9.1, and tvOS before 9.2 allows remote attackers to cause a denial of service resource consumption and application crash via a crafted web site...