The vulnerability of the Sandbox component of the Mac OS X operating system allows a malicious actor to trigger a service failure or execute arbitrary code in a privileged context.

The vulnerability of the Sandbox component of the Mac OS X operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in a privileged context remotely, or to trigger a service failure...

The vulnerability of the CFNetwork component in the Mac OS X operating system allows a hacker to trigger a service failure or execute arbitrary code in a privileged context.

The vulnerability of the CFNetwork component in the Mac OS X operating system arises from the execution of an operation beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in a privileged context, or to trigger a service failure...

The vulnerability of the fsck_msdos component in the Mac OS X operating system allows a hacker to trigger a service failure or execute arbitrary code in a privileged context.

The vulnerability of the fsckmsdos component of the Mac OS X operating system arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in privileged context, or cause a service failure memory corruption...

The vulnerability of the Mac OS X operating system’s kernel allows a hacker to trigger a service failure or execute arbitrary code in a privileged context.

The vulnerability of the Mac OS X operating system’s kernel arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in privileged context, or cause a service failure memory corruption through a...

CVE-2017-7159

An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the "IOAcceleratorFamily" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

CVE-2017-13862

An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause...

CVE-2017-13858

An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the "IOKit" component. It allows attackers to execute arbitrary code in a privileged context via a crafted app...

Code injection

An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the "IOKit" component. It allows attackers to execute arbitrary code in a privileged context via a crafted app...

The vulnerability of the IOFireWireFamily component in the Mac OS X operating system allows a hacker to execute arbitrary code in a privileged context or cause a service failure.

The vulnerability of the IOFireWireFamily component in the Mac OS X operating system arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in privileged context or cause a service failure memory corrupti...

The vulnerability of the Wi-Fi component of the iOS operating system allows a hacker to trigger a service failure or execute arbitrary code in a privileged context.

The vulnerability of the iOS operating system’s Wi-Fi component arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in privileged context or cause a service failure memory corruption by using specially...

The vulnerability of the SQLite component in operating systems such as Mac OS X and iOS, as well as in the iCloud service, allows a malicious actor to execute arbitrary code in a privileged context or cause a service failure.

The vulnerability of the SQLite component in operating systems such as Mac OS X and iOS, as well as in the iCloud service, arises from operations that occur outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in privileged contexts or cau...

The vulnerability of the Wi-Fi component of the iOS operating system allows a hacker to execute arbitrary code in a privileged context or cause a service failure.

The vulnerability of the iOS operating system’s Wi-Fi component arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in privileged context or trigger a service denial a situation known as a “race...

CVE-2017-13838

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Sandbox" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

CVE-2017-13833

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "CFNetwork" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

CVE-2017-13830

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "HFS" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

CVE-2017-13811

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "fsckmsdos" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

Memory corruption

An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is affected. iCloud before 7.0 on Windows is affected. tvOS before 11 is affected. watchOS before 4 is affected. The issue involves the "SQLite" component. It allows attackers to execute arbitrary cod...

Memory corruption

An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is affected. tvOS before 11 is affected. watchOS before 4 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denia...

The vulnerability of the Safari browser component, the iOS operating system, and the multimedia player iTunes allows a hacker to trigger a service failure or execute arbitrary code in a privileged context.

The vulnerability of the Safari browser component, the iOS operating system, and the multimedia player iTunes is due to an operation that goes beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in a privileged context, or to cause ...

The vulnerability of the Safari browser component, the iOS operating system, and the multimedia player iTunes allows a hacker to trigger a service failure or execute arbitrary code in a privileged context.

The vulnerability of the Safari browser component, the iOS operating system, and the multimedia player iTunes is due to an operation that goes beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in a privileged context, or to cause ...