CVE-2017-6976

An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "Sandbox Profiles" component. It allows attackers to bypass intended access restrictions for iCloud user records via a crafted app...

CVE-2017-6976

An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "Sandbox Profiles" component. It allows attackers to bypass intended access restrictions for iCloud user records via a crafted app...

Code injection

An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Sandbox Profiles" component. It allows attackers to determine whether arbitrary files exist via a crafted app...

Code injection

An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Profiles" component. It does not enforce the configuration profile's settings for whether pairings are allowed...

CVE-2017-13806

An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Profiles" component. It does not enforce the configuration profile's settings for whether pairings are allowed...

CVE-2017-13877

An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Sandbox Profiles" component. It allows attackers to determine whether arbitrary files exist via a crafted app...

Design/Logic Flaw

An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "Sandbox Profiles" component. It allows attackers to bypass intended access restrictions for iCloud user records via a crafted app...

CVE-2017-13806

An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Profiles" component. It does not enforce the configuration profile's settings for whether pairings are allowed...

CVE-2017-13877

An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Sandbox Profiles" component. It allows attackers to determine whether arbitrary files exist via a crafted app...

CVE-2017-13877

An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Sandbox Profiles" component. It allows attackers to determine whether arbitrary files exist via a crafted app...

CVE-2017-6976

CVE-2017-6976 describes a sandbox bypass in Apple iOS Sandbox Profiles affecting iOS versions before 10.3, where a crafted app may bypass access restrictions to iCloud user records. Connected sources confirm the issue and identify Sandbox Profiles as the vulnerable component, with Apple addressin...

CVE-2017-13806

An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Profiles" component. It does not enforce the configuration profile's settings for whether pairings are allowed...

CVE-2017-6976

An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "Sandbox Profiles" component. It allows attackers to bypass intended access restrictions for iCloud user records via a crafted app...

CVE-2017-13806

CVE-2017-13806 affects Apple iOS prior to 11, in the Profiles component. The issue is that configuration profiles do not enforce whether pairings are allowed, which could lead to device pairing records being installed despite a disallowing profile. According to Apple’s security update content, th...

CVE-2017-13877

The CVE-2017-13877 entry affects Apple iOS Sandbox Profiles. In iOS versions prior to 11, the Sandbox Profiles component allowed a crafted app to determine whether arbitrary files exist outside the sandbox, enabling information disclosure about installed apps/files. Connected documents corroborat...

PT-2018-5593

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 11 Description: An issue was discovered in certain Apple products, specifically involving the "Profiles" component. The issue is that the component does not enforce the configuration profile's settings for whether pairin...

PT-2018-8357

Name of the Vulnerable Software and Affected Versions iOS versions prior to 10.3 Description The issue involves the Sandbox Profiles component and allows attackers to bypass intended access restrictions for iCloud user records via a crafted app. Recommendations For iOS versions prior to 10.3,...

PT-2018-5603

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 11 Description: An issue in certain Apple products involves the Sandbox Profiles component, allowing attackers to determine whether arbitrary files exist via a crafted app. Recommendations: For iOS versions prior to 11,...

CVE-2017-6976: Undefined Security Weakness

An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "Sandbox Profiles" component. It allows attackers to bypass intended access restrictions for iCloud user records via a crafted app...

CVE-2017-13877: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Sandbox Profiles" component. It allows attackers to determine whether arbitrary files exist via a crafted app...