CVE-2014-4380

Concretely, CVE-2014-4380 is tied to IOHIDFamily in macOS (OS X Yosemite 10.10.x up to 10.10.2). The issue is a heap buffer overflow in IOHIDFamily's handling of key-mapping properties that could allow a local user to execute arbitrary code with system privileges. Mitigation in the connected doc ...

CVE-2014-4415

WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-09-17-1 and...

CVE-2014-4383

The Assets subsystem in Apple iOS before 8 and Apple TV before 7 allows man-in-the-middle attackers to spoof a device's update status via a crafted Last-Modified HTTP response header...

CVE-2014-4419

CVE-2014-4419: Kernel memory disclosure via uninitialized memory in the Apple OS X/iOS network statistics interface (kernel). The issue allows a crafted application to obtain sensitive memory content and memory-layout information. Affected platform references in the public data point to OS X kern...

CVE-2014-4379

An unspecified IOHIDFamily function in Apple iOS before 8 and Apple TV before 7 lacks proper bounds checking to prevent reading of kernel pointers, which allows attackers to bypass the ASLR protection mechanism via a crafted application...

CVE-2014-4380

The IOHIDFamily kernel extension in Apple iOS before 8 and Apple TV before 7 lacks proper bounds checking on write operations, which allows attackers to execute arbitrary code in the kernel's context via a crafted application...

CVE-2014-4412

CVE-2014-4412 affects WebKit as used in Apple iOS before 8 and Apple TV before 7. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and app crash) via a crafted website. Root cause is memory corruption in WebKit; the documents do n...

CVE-2014-4381

Libnotify in Apple iOS before 8 and Apple TV before 7 lacks proper bounds checking on write operations, which allows attackers to execute arbitrary code as root via a crafted application...

CVE-2014-4405

CVE-2014-4405 affects IOHIDFamily in Apple iOS prior to 8 and Apple TV prior to 7. The description cites a memory handling issue in IOHIDFamily’s key-mapping properties that can lead to a NULL pointer dereference, enabling arbitrary code execution in a privileged context or a denial of service. C...

CVE-2014-4413

CVE-2014-4413 concerns WebKit, as used in Apple iOS before 8 and Apple TV before 7, where a crafted website can trigger memory corruption leading to remote code execution or a memory-related crash. Affected component: WebKit; vulnerable vector is remote web content. Root cause described as memory...

CVE-2014-4364

CVE-2014-4364 affects the 802.1X subsystem in Apple iOS before 8 and Apple TV before 7. An attacker can remotely trigger credentials exfiltration by offering LEAP authentication from a crafted Wi‑Fi AP, then perform a cryptographic attack against the MS-CHAPv1 hash to derive credentials. Public r...

CVE-2014-4375

Double free vulnerability in Apple iOS before 8 and Apple TV before 7 allows local users to gain privileges or cause a denial of service device crash via vectors related to Mach ports...

CVE-2014-4375

CVE-2014-4375 is a local privilege-escalation and denial-of-service risk tied to a double-free in Mach ports within Apple iOS pre-8 and Apple TV pre-7. Public docs tie the issue to kernel/Mach ports handling, with confirmed remediation in iOS 8 and Apple TV 7 security updates. Affected components...

CVE-2014-4373

The IntelAccelerator driver in the IOAcceleratorFamily subsystem in Apple iOS before 8 and Apple TV before 7 allows attackers to cause a denial of service NULL pointer dereference and device restart via a crafted application...

CVE-2014-4388

CVE-2014-4388 affects IOKit IODataQueue on Apple devices (iOS before 8, Apple TV before 7). The issue is a validation flaw in IODataQueue metadata fields stored in shared memory that can be manipulated by a user to corrupt memory, enabling arbitrary code execution in kernel/system context. Connec...

CVE-2014-4414

WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-09-17-1 and...

CVE-2014-4408

The rtsetgate function in the kernel in Apple iOS before 8 and Apple TV before 7 allows local users to gain privileges or cause a denial of service out-of-bounds read and device crash via a crafted call...

CVE-2014-4405

IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privileged context or cause a denial of service NULL pointer dereference via an application that provides crafted key-mapping properties...

CVE-2014-4404

Heap-based buffer overflow in IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privileged context via an application that provides crafted key-mapping properties...

CVE-2014-4413

WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-09-17-1 and...