CVE-2016-1779

CVE-2016-1779 affects WebKit in Apple iOS < 9.3 and Safari

CVE-2016-1758: Improper Restriction of Operations within the Bounds of a Memory Buffer

The kernel in Apple iOS before 9.3 and OS X before 10.11.4 allows attackers to obtain sensitive memory-layout information or cause a denial of service out-of-bounds read via a crafted app...

PT-2016-1551

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.3 Apple OS X versions prior to 10.11.4 Apple tvOS versions prior to 9.2 Apple watchOS versions prior to 2.2 Description The issue allows attackers to execute arbitrary code in a privileged context or cause a denia...

CVE-2016-1783: Improper Restriction of Operations within the Bounds of a Memory Buffer

WebKit in Apple iOS before 9.3, Safari before 9.1, and tvOS before 9.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site...

CVE-2016-1763: Improper Input Validation

Messages in Apple iOS before 9.3 does not ensure that an auto-fill action applies to the intended message thread, which allows remote authenticated users to obtain sensitive information by providing a crafted sms: URL and reading a thread...

CVE-2016-1775: Improper Restriction of Operations within the Bounds of a Memory Buffer

TrueTypeScaler in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font file...

PT-2016-1520

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.3 Apple OS X versions prior to 10.11.4 Apple watchOS versions prior to 2.2 Description The issue is related to the incorrect operation of a cryptographic protection mechanism in the operating systems. This could...

CVE-2016-1757: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in the kernel in Apple iOS before 9.3 and OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context via a crafted app...

PT-2016-1558

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.3 Apple OS X versions prior to 10.11.4 Apple tvOS versions prior to 9.2 Apple watchOS versions prior to 2.2 Description The issue is related to the IOHIDFamily component in Apple operating systems, which lacks...

CVE-2016-1751: Undefined Security Weakness

The kernel in Apple iOS before 9.3, tvOS before 9.2, and watchOS before 2.2 does not properly restrict the execute permission, which allows attackers to bypass a code-signing protection mechanism via a crafted app...

CVE-2016-1756: Undefined Security Weakness

The kernel in Apple iOS before 9.3 and OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service NULL pointer dereference via a crafted app...

CVE-2016-1788: Undefined Security Weakness

Messages in Apple iOS before 9.3, OS X before 10.11.4, and watchOS before 2.2 does not properly implement a cryptographic protection mechanism, which allows remote attackers to read message attachments via vectors related to duplicate messages...

CVE-2016-1780: Exposure of Sensitive Information to an Unauthorized Actor

WebKit in Apple iOS before 9.3 does not prevent hidden web views from reading orientation and motion data, which allows remote attackers to obtain sensitive information about a device's physical environment via a crafted web site...

CVE-2016-1778: Undefined Security Weakness

WebKit in Apple iOS before 9.3 and Safari before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site...

PT-2016-1542

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.3 Description The issue is related to the Profiles component in Apple iOS, which does not properly validate certificates. This allows attackers to spoof an MDM profile trust relationship via unspecified vectors. T...

CVE-2016-1740: Improper Restriction of Operations within the Bounds of a Memory Buffer

FontParser in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted PDF document...

PT-2016-1570

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.3 OS X versions prior to 10.11.4 Description The issue is caused by a buffer overflow in the AppleUSBNetworking component, allowing physically proximate attackers to execute arbitrary code in a privileged context ...

CVE-2016-1766: Undefined Security Weakness

The Profiles component in Apple iOS before 9.3 does not properly validate certificates, which allows attackers to spoof an MDM profile trust relationship via unspecified vectors...

PT-2016-1556

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.3 Apple OS X versions prior to 10.11.4 Apple tvOS versions prior to 9.2 Apple watchOS versions prior to 2.2 Description The issue is related to a use-after-free vulnerability in the kernel, allowing attackers to...

PT-2016-1554

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.3 Apple OS X versions prior to 10.11.4 Apple tvOS versions prior to 9.2 Apple watchOS versions prior to 2.2 Description The issue exists due to insufficient input validation in the kernel of the operating systems...