CVE-2016-7579

An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. tvOS before 10.0.1 is affected. The issue involves the "CFNetwork Proxies" component, which allows man-in-the-middle attackers to spoof a proxy password authentication requirement and...

CVE-2016-7579

An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. tvOS before 10.0.1 is affected. The issue involves the "CFNetwork Proxies" component, which allows man-in-the-middle attackers to spoof a proxy password authentication requirement and...

CVE-2016-7579

An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. tvOS before 10.0.1 is affected. The issue involves the "CFNetwork Proxies" component, which allows man-in-the-middle attackers to spoof a proxy password authentication requirement and...

CVE-2016-7579

CVE-2016-7579 affects Apple platforms via the CFNetwork Proxies component. A phishing issue in handling proxy credentials could let an attacker in a privileged network position leak sensitive user information by spoofing a proxy password prompt. Affected: iOS before 10.1, macOS before 10.12.1, tv...

About the security content of iOS 10.1 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

About the security content of tvOS 9.2.1 - Apple Support

For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are available. To learn more about Apple Product Security, see the Apple Product Security website. For information about...

Mac OS X 10.x < 10.12.1 Multiple Vulnerabilities

Binary data 9758.prm...

Apple TV < 10.0.1 Multiple Vulnerabilities

Binary data 9757.prm...

Apple iOS < 10.1 Multiple Vulnerabilities

Binary data 9756.prm...

Apple TV < 10.0.1 Multiple Vulnerabilities

According to its banner, the version of Apple TV on the remote device is prior to 10.0.1. It is, therefore, affected by multiple vulnerabilities : - A flaw exists in WebKit when handling the location attribute that allows an unauthenticated, remote attacker to bypass the cross-origin policies and...

Apple iOS/tvOS/macOS Information Disclosure Vulnerability

Apple iOS is a set of operating systems developed for mobile devices; tvOS is a smart TV operating system; and watchOS is a smart watch operating system. A security vulnerability in CFNetwork Proxies in several Apple products allows remote attackers to exploit the vulnerability to gain access to...

macOS 10.12.x < 10.12.1 Multiple Vulnerabilities

The remote host is running a version of Mac OS X that is 10.12.x prior to macOS 10.12.1. It is, therefore, affected by multiple vulnerabilities in the following components : - ATS - AppleMobileFileIntegrity - AppleSMC - CFNetwork Proxies - CoreGraphics - FaceTime - FontParser - IDS - Connectivity...

About the security content of tvOS 10.0.1

About the security content of tvOS 10.0.1 This document describes the security content of tvOS 10.0.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

Apple iOS/tvOS and OS X El Capitan CFNetwork Proxies Information Disclosure Vulnerability

Apple iOS, watchOS, OS X El Capitan, and tvOS are products of Apple Inc. Apple iOS is an operating system for mobile devices; watchOS is a smartwatch operating system; and OS X El Capitan is a specialized operating system for Mac computers. tvOS is a smart TV operating system; tvOS is a smart TV...

CVE-2016-1801

The CFNetwork Proxies subsystem in Apple iOS before 9.3.2, OS X before 10.11.5, and tvOS before 9.2.1 mishandles URLs in http and https requests, which allows remote attackers to obtain sensitive information via unspecified vectors...

CVE-2016-1801

The CFNetwork Proxies subsystem in Apple iOS before 9.3.2, OS X before 10.11.5, and tvOS before 9.2.1 mishandles URLs in http and https requests, which allows remote attackers to obtain sensitive information via unspecified vectors...

Design/Logic Flaw

The CFNetwork Proxies subsystem in Apple iOS before 9.3.2, OS X before 10.11.5, and tvOS before 9.2.1 mishandles URLs in http and https requests, which allows remote attackers to obtain sensitive information via unspecified vectors...

CVE-2016-1801

CVE-2016-1801 affects Apple CFNetwork Proxies in iOS (before 9.3.2), OS X (before 10.11.5), and tvOS (before 9.2.1). The vulnerability is an information leak in the handling of HTTP/HTTPS requests, allowing a privileged network-position attacker to obtain sensitive user data through URL handling....

CVE-2016-1801

The CFNetwork Proxies subsystem in Apple iOS before 9.3.2, OS X before 10.11.5, and tvOS before 9.2.1 mishandles URLs in http and https requests, which allows remote attackers to obtain sensitive information via unspecified vectors...

The vulnerability of the iOS operating system allows attackers to carry out attacks related to the injection of cookie files.

The vulnerability of the CFNetwork Proxies component in the iOS operating system exists due to the lack of measures taken to neutralize these special elements. Exploiting this vulnerability allows a malicious actor to perform attacks related to the injection of cookies through a specially crafted...