CVE-2016-4667

An issue was discovered in certain Apple products. macOS before 10.12.1 is affected. The issue involves the "ATS" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted font...

UBUNTU-CVE-2017-2365

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted...

Apple macOS Sierra IOSurface Component Memory Corruption Vulnerability

Apple macOS Sierra is a specialized operating system developed by Apple for Mac computers.IOSurface is one of the programming framework components. A security vulnerability exists in the IOSurface component in Apple macOS Sierra versions prior to 10.12.2. A local attacker could exploit the...

Sandbox Profiles Component Information Disclosure Vulnerability in Apple iOS/tvOS/WatchOS

Apple iOS, tvOS, and watchOS are products of Apple Inc. Apple iOS is an operating system for mobile devices; tvOS is a smart TV operating system; and watchOS is a smart watch operating system. sandbox Profiles is one of the sandbox components. Sandbox Profiles is one of the sandbox components. An...

CVE-2016-7852

Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before 15.020.20039 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...

The vulnerabilities in iOS and Mac OS X operating systems allow attackers to trigger service failures or obtain confidential information from the process memory.

The vulnerability of the IOAcceleratorFamily component in iOS and Mac OS X operating systems arises from operations that occur outside of the buffer in memory. Exploiting this vulnerability can allow a malicious actor to obtain confidential information from the process’s memory or cause a service...

Vulnerabilities of operating systems such as Mac OS X and iOS, which allow attackers to obtain confidential information from process memory

The vulnerability of the FontParser component in Mac OS X and iOS operating systems arises due to buffer overflow. Exploiting this vulnerability can allow a malicious actor to obtain confidential information from the process’s memory using a specially crafted font...

Apple OS X CoreDisplay Information Disclosure Vulnerability

Apple OS X is a specialized operating system developed by Apple for Mac computers, of which CoreDisplay is a core display component. An information disclosure vulnerability exists in CoreDisplay in Apple OS X versions prior to 10.12, which can be exploited by an attacker to view any user's screen...

WebKit memory corruption vulnerability in multiple Apple products (CNVD-2016-08252)

Apple iOS, tvOS, iTunes, and Safari are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; tvOS is an operating system for smart TVs; iTunes is a suite of media player applications; and Safari is a web browser that comes as the default browser with Mac OS X and...

Apple OS X WindowServer Type Obfuscation Vulnerability

Apple OS X is a specialized operating system developed by Apple for Mac computers, of which WindowServer is a Window Service component. A type obfuscation vulnerability exists in WindowServer in Apple OS X versions prior to 10.12, which can be exploited by a local attacker to gain root privileges...

Apple iOS and OS X IOAcceleratorFamily Arbitrary Command Execution Vulnerability

Apple iOS and OS X are both operating systems from Apple Inc. Apple iOS is developed for mobile devices; Apple OS X is developed for Mac computers.IOAcceleratorFamily is one of the IO acceleration management components. An arbitrary command execution vulnerability exists in IOAcceleratorFamily in...

CVE-2016-4754

ServerDocs Server in Apple OS X Server before 5.2 supports the RC4 cipher, which might allow remote attackers to defeat cryptographic protection mechanisms via unspecified vectors...

CVE-2016-4755

Terminal in Apple OS X before 10.12 uses weak permissions for the .bashhistory and .bashsession files, which allows local users to obtain sensitive information via unspecified vectors...

CVE-2016-4748

Perl in Apple OS X before 10.12 allows local users to bypass the taint-mode protection mechanism via a crafted environment variable...

CVE-2016-4739

mDNSResponder in Apple OS X before 10.12, when VMnet.framework is used, arranges for a DNS proxy to listen on all interfaces, which allows remote attackers to obtain sensitive information by sending a DNS query to an unintended interface...

CVE-2016-4735

WebKit in Apple iOS before 10, Safari before 10, and tvOS before 10 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2016-4611, CVE-2016-4730, CVE-2016-4733, and CVE-2016-4734...

CVE-2016-4717

The File Bookmark component in Apple OS X before 10.12 mishandles scoped-bookmark file descriptors, which allows attackers to cause a denial of service via a crafted app...

CVE-2016-4716

diskutil in DiskArbitration in Apple OS X before 10.12 allows local users to gain privileges via unspecified vectors...

CVE-2016-4713

CoreDisplay in Apple OS X before 10.12 allows attackers to view arbitrary users' screens by leveraging screen-sharing access...

Apple OS X Kernel Memory Corruption Vulnerability (CNVD-2016-08113)

Apple OS X is a specialized operating system developed by Apple for Mac computers, of which Kernel is a kernel component. A memory corruption vulnerability exists in the Kernel in Apple OS X version 10.11.6, which can be exploited by a specially crafted application to execute arbitrary code with...