PT-2016-3354

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.3.5 Description The issue is related to the kernel in Apple iOS, which lacks protection for sensitive data. This allows attackers to obtain sensitive information from memory via a crafted app. Recommendations For...

Multiple Apple products kernel memory corruption vulnerability (CNVD-2016-05665)

Apple iOS, OS X, tvOS, and watchOS are products of Apple Inc. Apple iOS is an operating system for mobile devices; OS X is a specialized operating system for Mac computers; tvOS is an operating system for smart TVs; and watchOS is an operating system for smart watches. kernel is one of the kernel...

Apple iOS Cross-Site Scripting Vulnerability

Apple iOS is an operating system for handheld devices developed by Apple Inc. A cross-site scripting vulnerability exists in Apple iOS before 9.3.3, Safari before 9.1.2, which allows remote attackers to inject arbitrary web script or HTML via a crafted HTTP/09 response...

Apple iOS Spoofing Vulnerability

Apple iOS is an operating system developed for mobile devices. A security vulnerability exists in Safari on Apple iOS that can be exploited by remote attackers to construct malicious web pages that trick users into parsing a spoofed display URL...

On the Android Crypto Weakness, FDE Bypass, Hummingbad, and More

Mike Mimoso, Tom Spring and Chris Brook discuss the news of the week, including all things Android: the crypto weakness, the full disk encryption bypass, and new malware, Hummingbad, which impacts the mobile operating system. The three also discuss the TP-Link router fiasco. Download:...

The vulnerability of the iTunes software allows a malicious individual to compromise the confidentiality of protected information.

The vulnerability exists in CFNetwork in Apple’s iOS, OS X, and Apple TV. It stems from the lack of checks for the completeness of the HTTP cookie header before its values are interpreted. Exploiting this vulnerability allows malicious actors to circumvent access restrictions by closing the TCP...

Russia to get rid of Android and iOS by launching its own Mobile Operating System

Last month, it was reported that the European Commission is planning to impose a record antitrust fine of about 3 BILLION euros US$3.4 Billion on Google for violating antitrust laws. Not just Europe, Google also lost an anti-monopoly appeal in Russia two months back against ruling for violating i...

Apple iOS/watchOS/tvOS and OS X El Capitan kernel arbitrary code execution vulnerability (CNVD-2016-03534)

Apple iOS, watchOS, OS X El Capitan, and tvOS are products of Apple Inc. Apple iOS is an operating system for mobile devices; watchOS is an operating system for smartwatches; and OS X El Capitan is a specialized operating system for Mac computers. tvOS is a kernel component; OS X El Capitan is a...

Apple iOS/watchOS/tvOS and OS X El Capitan IOHIDFamily Arbitrary Code Execution Vulnerability (CNVD-2016-03520)

Apple iOS, watchOS, OS X El Capitan, and tvOS are products of Apple Inc. Apple iOS is an operating system for mobile devices; watchOS is a smartwatch operating system; and OS X El Capitan is a specialized operating system for Mac computers. tvOS is a smart television operating system; tvOS is a...

Apple iOS/watchOS/tvOS and OS X El Capitan Disk Images Arbitrary Code Execution Vulnerability

Apple iOS is an operating system for Apple's cell phones.OS X El Capitan is a dedicated operating system for Mac computers.watchOS is a smartwatch operating system. A security vulnerability in Disk Images in Apple iOS, watchOS, and OS X El Capitan allows attackers to submit a special request to...

Apple iOS/watchOS/tvOS and OS X El Capitan IOAcceleratorFamily Arbitrary Code Execution Vulnerability

Apple iOS is an operating system on Apple's cell phones. oS X El Capitan is a dedicated operating system developed for Mac computers. watchOS is a smartwatch operating system. A security vulnerability in IOAcceleratorFamily in Apple iOS, watchOS, and OS X El Capitan could be exploited by an...

Apple iOS/watchOS/tvOS and OS X El Capitan IOAcceleratorFamily Arbitrary Code Execution Vulnerability (CNVD-2016-03452)

Apple iOS is an operating system on Apple's cell phones. oS X El Capitan is a dedicated operating system developed for Mac computers. watchOS is a smartwatch operating system. A security vulnerability in IOAcceleratorFamily in Apple iOS, watchOS, and OS X El Capitan could be exploited by an...

CVE-2016-1857

WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2016-1854, CVE-2016-1855, and CVE-2016-1856...

CVE-2016-1828

The kernel in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app, a different vulnerability than CVE-2016-1827, CVE-2016-1829,...

CVE-2016-1756

The kernel in Apple iOS before 9.3 and OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service NULL pointer dereference via a crafted app...

Apple iOS/Safari Information Disclosure Vulnerability

Apple iOS is Apple's operating system for several smart devices.Apple Safari is an American Apple web browser that is the default browser that comes with the Mac OS X and iOS operating systems. The page load implementation in WebKit in Apple iOS before 9.3 and Safari before 9.1 fails to properly...

The vulnerability of Safari browser and iOS operating system allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of the WebKit component in the Safari browser and the iOS operating system is caused by buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a service failure memory corruption through a specially crafted web page...

The vulnerabilities in operating systems such as Mac OS X and iOS allow attackers to trigger service failures or execute arbitrary code.

The vulnerability of the OpenGL component in Mac OS X and iOS operating systems arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely or cause a service failure memory corruption by using a specially crafted web page...

Apple iOS dyld arbitrary code execution vulnerability (CNVD-2015-08185)

Apple iOS is an operating system developed by Apple for use in cell phones and more. A segment checksum vulnerability exists in the Apple iOS dyld handling, which allows an attacker to exploit the vulnerability to execute arbitrary code with system privileges...

Apple iOS/OS X FontParser Memory Corruption Vulnerability (CNVD-2015-07112)

OS X formerly Mac OS X is the latest version of Apple's proprietary operating system for the Macintosh computer. iOS is an operating system developed by Apple for mobile devices. A security vulnerability exists in FontParser in Apple iOS versions prior to 9.1 and Apple OS X versions prior to...