Memory corruption

WebKit, as used in Apple iOS before 9.2.1 and Safari before 9.0.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2016-1723 and CVE-2016-1725...

Memory corruption

WebKit, as used in Apple iOS before 9.2.1 and Safari before 9.0.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2016-1725 and CVE-2016-1726...

CVE-2016-1728

The Cascading Style Sheets CSS implementation in Apple iOS before 9.2.1 and Safari before 9.0.3 mishandles the "a:visited button" selector during height processing, which makes it easier for remote attackers to obtain sensitive browser-history information via a crafted web site...

Memory corruption

WebKit, as used in Apple iOS before 9.2.1, Safari before 9.0.3, and tvOS before 9.1.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2016-1727...

CVE-2016-1730

CVE-2016-1730 affects WebSheet in iOS prior to 9.2.1. A malicious captive portal could read or write cookies due to a flaw in the captive portal cookie store. Apple’s security update in iOS 9.2.1 addresses this by isolating the cookie store for captive portals. No exploitation details are provide...

CVE-2016-1730

WebSheet in Apple iOS before 9.2.1 allows remote attackers to read or write to cookies by operating a crafted captive portal...

CVE-2016-1727

WebKit vulnerability CVE-2016-1727 affects Apple platforms: WebKit as used in iOS prior to 9.2.1, Safari prior to 9.0.3, and tvOS prior to 9.1.1. The issue allows remote attackers to cause memory corruption, enabling arbitrary code execution or a denial of service via a crafted website. Connected...

CVE-2016-1723

WebKit exploit in Apple ecosystems: CVE-2016-1723 affects WebKit as used in iOS prior to 9.2.1 and Safari prior to 9.0.3, enabling remote code execution or memory corruption via a crafted website. The issue is documented across multiple sources (Apple advisories HT206168/HT205730) and related ent...

CVE-2016-1725

WebKit, as used in Apple iOS before 9.2.1 and Safari before 9.0.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2016-1723 and CVE-2016-1726...

CVE-2016-1719

The IOHIDFamily API in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain privileges or cause a denial of service memory corruption via unspecified vectors...

CVE-2016-1720

IOKit in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain privileges or cause a denial of service memory corruption via unspecified vectors...

CVE-2016-1721

CVE-2016-1721 is reported for Apple devices: iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1. The description indicates a local privilege escalation or denial of service caused by memory corruption in the kernel via unspecified vectors. The connected Apple security content references...

CVE-2016-1726

WebKit, as used in Apple iOS before 9.2.1 and Safari before 9.0.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2016-1723 and CVE-2016-1725...

CVE-2016-1724

WebKit, as used in Apple iOS before 9.2.1, Safari before 9.0.3, and tvOS before 9.1.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2016-1727...

CVE-2016-1727

WebKit, as used in Apple iOS before 9.2.1, Safari before 9.0.3, and tvOS before 9.1.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2016-1724...

CVE-2016-1726

CVE-2016-1726 affects WebKit used in Apple iOS prior to 9.2.1 and Safari prior to 9.0.3. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) by presenting a crafted website. This is a memory‑corruption issue in WebKit when handling ...

CVE-2016-1723

WebKit, as used in Apple iOS before 9.2.1 and Safari before 9.0.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2016-1725 and CVE-2016-1726...

CVE-2016-1725

CVE-2016-1725 affects WebKit as used in Apple iOS prior to 9.2.1 and Safari prior to 9.0.3. The vulnerability enables remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted website. The underlying issue is memory corruption in WebKit, and the pub...

CVE-2016-1728

The Cascading Style Sheets CSS implementation in Apple iOS before 9.2.1 and Safari before 9.0.3 mishandles the "a:visited button" selector during height processing, which makes it easier for remote attackers to obtain sensitive browser-history information via a crafted web site...

CVE-2016-1724

CVE-2016-1724 is a WebKit memory-corruption vulnerability in Apple environments (iOS, Safari, tvOS) that could allow remote code execution or memory corruption via a crafted site. Connected sources corroborate related WebKit issues (e.g., CVE-2016-1723/1725–1728) and Gentoo GLSA-201706-15 recomme...