CVE-2018-4115: Improper Preservation of Permissions

An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves CFPreferences in the "System Preferences" component. It allows attackers to bypass intended access...

Null pointer dereference

The eappwdperformconfirmexchange function in eappeer/eappwd.c in wpasupplicant 2.x before 2.6, when EAP-pwd is enabled in a network configuration profile, allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via an EAP-pwd Confirm message followed by the...

CVE-2015-5316

The CVE-2015-5316 issue affects wpa_supplicant (2.x) prior to 2.6, in the eap_pwd_perform_confirm_exchange function inside eap_pwd.c. When EAP-pwd is enabled in a network profile, processing an EAP-pwd Confirm message followed by the Identity exchange can trigger a NULL pointer dereference, leadi...

CVE-2015-7062

Apple OS X before 10.11.2 and tvOS before 9.1 allow local users to bypass intended configuration-profile installation restrictions via unspecified vectors...

Design/Logic Flaw

Apple OS X before 10.11.2 and tvOS before 9.1 allow local users to bypass intended configuration-profile installation restrictions via unspecified vectors...

CVE-2015-7062

Apple OS X before 10.11.2 and tvOS before 9.1 allow local users to bypass intended configuration-profile installation restrictions via unspecified vectors...

CVE-2015-7062

Technical details for CVE-2015-7062 are not publicly available in the provided documents. Monitor for updates for affected products, vectors, or fixes.

PT-2015-3121

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.11.2 Apple tvOS versions prior to 9.1 Description The issue allows local users to bypass intended configuration-profile installation restrictions. It is related to insufficient access control in the configuratio...

CVE-2015-7062: Undefined Security Weakness

Apple OS X before 10.11.2 and tvOS before 9.1 allow local users to bypass intended configuration-profile installation restrictions via unspecified vectors...

CVE-2015-5315

The eappwdprocess function in eappeer/eappwd.c in wpasupplicant 2.x before 2.6 does not validate that the reassembly buffer is large enough for the final fragment when EAP-pwd is enabled in a network configuration profile, which allows remote attackers to cause a denial of service process...

CVE-2015-1118

libnetcore in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 allows attackers to cause a denial of service memory corruption and application crash via a crafted configuration profile...

Memory corruption

libnetcore in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 allows attackers to cause a denial of service memory corruption and application crash via a crafted configuration profile...

CVE-2015-1118: Undefined Security Weakness

libnetcore in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 allows attackers to cause a denial of service memory corruption and application crash via a crafted configuration profile...

PT-2015-5102

Name of the Vulnerable Software and Affected Versions libnetcore in Apple iOS versions prior to 8.3 libnetcore in Apple OS X versions prior to 10.10.3 libnetcore in Apple TV versions prior to 7.2 Description The issue allows attackers to cause a denial of service, resulting in memory corruption a...

Gmail App for iOS leaves Users vulnerable to Man-in-the-Middle Attacks

Google has failed to provide a very important security measure in its Gmail application for iOS that left millions of its Apple device users to Man-in-the-Middle MitM attacks capable of monitoring encrypted email communications. Researcher at mobile security firm Lacoon has discovered that Google...

CVE-2014-1282

The Profiles component in Apple iOS before 7.1 and Apple TV before 6.1 allows attackers to bypass intended configuration-profile visibility requirements via a long name...

Design/Logic Flaw

The Profiles component in Apple iOS before 7.1 and Apple TV before 6.1 allows attackers to bypass intended configuration-profile visibility requirements via a long name...

CVE-2014-1282

The Profiles component in Apple iOS before 7.1 and Apple TV before 6.1 allows attackers to bypass intended configuration-profile visibility requirements via a long name...

CVE-2014-1282

CVE-2014-1282 affects Apple iOS before 7.1 and Apple TV before 6.1, where a configuration profile with a long name could be loaded but not displayed in the Profiles UI, bypassing visibility requirements. The vulnerability is tied to the Profiles component and is documented in multiple sources (NV...

CVE-2014-1282: Undefined Security Weakness

The Profiles component in Apple iOS before 7.1 and Apple TV before 6.1 allows attackers to bypass intended configuration-profile visibility requirements via a long name...