CVE-2017-7064

CVE-2017-7064 affects WebKit-based components across Apple and WebKitGTK+ ecosystems. The issue is a memory access/read restriction bypass in the WebKit component, exploitable via crafted web content. Affected products include iOS 10.3.x, Safari 10.x, and WebKitGTK+ shipped with GTK+ deployments ...

CVE-2017-7067

CVE-2017-7067 affects macOS Sierra (pre-10.12.6) in the Kernel component and allows a crafted app to bypass memory-read restrictions. Affected systems could enable local privilege consequences; Apple’s updates (macOS 10.12.6 / Security Update 2017-003) address this by applying memory-management a...

CVE-2017-7036

An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "Intel Graphics Driver" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

CVE-2017-7064

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. The issue involves the "WebKit" component. It allows attackers to bypass intended memory-rea...

CVE-2017-7064

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. The issue involves the "WebKit" component. It allows attackers to bypass intended memory-rea...

CVE-2017-7028

CVE-2017-7028 affects Apple kernel on iOS (pre-10.3.3), macOS (pre-10.12.6), tvOS (pre-10.2.2), and watchOS (pre-3.2.3). Root cause: a validation/memory-read control gap in the Kernel that could let an app read restricted memory. Impact: an attacker could read memory contents that should be prote...

CVE-2017-7029

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a...

CVE-2017-7064

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. The issue involves the "WebKit" component. It allows attackers to bypass intended memory-rea...

CVE-2017-7067

An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

PT-2017-17485

Name of the Vulnerable Software and Affected Versions iOS versions prior to 10.3.3 Safari versions prior to 10.1.2 iCloud versions prior to 6.2.2 on Windows iTunes versions prior to 12.6.2 on Windows Description The issue involves the WebKit component and allows attackers to bypass intended...

PT-2017-17468

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.12.6 Description The issue involves the Intel Graphics Driver component and allows attackers to bypass intended memory-read restrictions via a crafted app. Recommendations For macOS versions prior to 10.12.6, update ...

CVE-2017-7064: Improper Input Validation

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. The issue involves the "WebKit" component. It allows attackers to bypass intended memory-rea...

CVE-2017-7064

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. The issue involves the "WebKit" component. It allows attackers to bypass intended memory-rea...

PT-2017-17486

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.12.6 Description An issue was discovered in macOS that involves the Kernel component, allowing attackers to bypass intended memory-read restrictions via a crafted app. Recommendations For macOS versions prior to...

CVE-2017-7029: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a...

CVE-2017-7028: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a...

CVE-2017-7045: Improper Input Validation

An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "Intel Graphics Driver" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

PT-2017-17463

Name of the Vulnerable Software and Affected Versions iOS versions prior to 10.3.3 macOS versions prior to 10.12.6 tvOS versions prior to 10.2.2 watchOS versions prior to 3.2.3 Description The issue involves the Kernel component and allows attackers to bypass intended memory-read restrictions via...

PT-2017-17474

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.12.6 Description The issue involves the Intel Graphics Driver component and allows attackers to bypass intended memory-read restrictions via a crafted app. Recommendations For macOS versions prior to 10.12.6, update ...

PT-2017-17462

Name of the Vulnerable Software and Affected Versions iOS versions prior to 10.3.3 macOS versions prior to 10.12.6 tvOS versions prior to 10.2.2 watchOS versions prior to 3.2.3 Description The issue involves the Kernel component and allows attackers to bypass intended memory-read restrictions via...