214 matches found
Apple macOS - IOHIDSystem Kernel Read/Write
Sources: https://siguza.github.io/IOHIDeous/ https://github.com/Siguza/IOHIDeous/ IOHIDeous A macOS kernel exploit based on an IOHIDFamily 0day. Write-up here: https://siguza.github.io/IOHIDeous/ Notice The prefetch timing attack I'm using for hid for some reason doesn't work on High Sierra 10.13...
About the security content of watchOS 2.2.2 - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...
About the security content of tvOS 9.2.2 - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...
CVE-2016-4650
Heap-based buffer overflow in IOHIDFamily in Apple iOS before 9.3.2, OS X before 10.11.5, and tvOS before 9.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...
CVE-2016-4650
Heap-based buffer overflow in IOHIDFamily in Apple iOS before 9.3.2, OS X before 10.11.5, and tvOS before 9.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...
CVE-2016-4650
CVE-2016-4650 is a heap-based buffer overflow in IOHIDFamily (kernel extension) on Apple platforms. Documents show that the vulnerability allows local attackers to execute arbitrary code with kernel privileges or cause memory corruption/DOS when a crafted app is processed. The CVE is linked to Ap...
The vulnerabilities in operating systems such as Mac OS X and iOS allow attackers to trigger service failures or execute arbitrary code in privileged contexts.
The vulnerability of the IOHIDFamily component in Mac OS X and iOS operating systems relates to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in a privileged context remotely, or to cause a service failure the use of resource...
Double free
An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "IOHIDFamily" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service...
CVE-2016-7591
An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "IOHIDFamily" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service...
CVE-2016-7591
CVE-2016-7591 (IOHIDFamily) affects Apple platforms (iOS prior to 10.2; macOS prior to 10.12.2; watchOS prior to 3.1.3) and involves a use-after-free in IOHIDFamily that could allow a local attacker to execute arbitrary code with kernel privileges or cause a denial of service via a crafted app. T...
About the security content of watchOS 2.2.1 - Apple Support
For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are available. To learn more about Apple Product Security, see the Apple Product Security website. For information about...
About the security content of watchOS 2.2 - Apple Support
For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are available. To learn more about Apple Product Security, see the Apple Product Security website. For information about...
About the security content of iOS 9.3 - Apple Support
For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are available. To learn more about Apple Product Security, see the Apple Product Security website. For information about...
About the security content of iOS 9.2.1 - Apple Support
For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are available. To learn more about Apple Product Security, see the Apple Product Security website. For information about...
Apple iOS < 10.2 Multiple Vulnerabilities
Binary data 9847.prm...
Multiple Apple Products IOHIDFamily Component Arbitrary Code Execution Vulnerability
Apple iOS, watchOS, macOS, and tvOS are products of Apple Inc. Apple iOS is an operating system for mobile devices; watchOS is a smartwatch operating system; IOHIDFamily is one of the kernel extensions abstract interfaces for human-computer interface devices components. A security vulnerability...
Mac OS X 10.x < 10.12.2 Multiple Vulnerabilities
Binary data 9840.prm...
Apple iOS < 10.2 Multiple Vulnerabilities
Binary data appleios102check.nbin...
The vulnerabilities in operating systems such as Mac OS X and iOS allow attackers to trigger service failures or increase their privileges.
The vulnerability of the IOHIDFamily component in Mac OS X and iOS operating systems is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to increase their privileges or cause service failures dereferencing the zero pointer using undefined vectors...
Apple OS X IOHIDFamily Heap Buffer Overflow Privilege Escalation Vulnerability
This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Apple OS X. User interaction is required to exploit this vulnerability in that the target must open a malicious file. The specific flaw exists within the IOHIDFamily kernel extension. The issue lies...