Memory corruption

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. iCloud before 6.2.1 on Windows is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause ...

CVE-2017-2549

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS UXSS attacks via a crafted web site that improperly...

Design/Logic Flaw

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a...

CVE-2017-2504

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS UXSS attacks via a crafted web site that improperly...

CVE-2017-2536

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...

CVE-2017-2505

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...

UBUNTU-CVE-2017-2536

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...

UBUNTU-CVE-2017-2499

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit Web Inspector" component. It allows attackers to execute arbitrary unsigned code or cause a denial of service memory...

CVE-2017-2530

The CVE-2017-2530 issue affects WebKit components in Apple products including iOS before 10.3.2, Safari before 10.1.1, iCloud for Windows before 6.2.1, and tvOS before 10.2.1. Root cause: memory corruption in WebKit that can be triggered by a crafted web site, enabling remote code execution or ca...

CVE-2017-2504

CVE-2017-2504 affects Apple WebKit components in iOS prior to 10.3.2, Safari prior to 10.1.1, and tvOS prior to 10.2.1. The issue is a logic/handling flaw in WebKit Editor commands that enables remote, universal cross‑site scripting (UXSS) via crafted web content. The vulnerability is tied to a W...

CVE-2017-6994

CVE-2017-6994 affects AVEVideoEncoder in Apple’s iOS, tvOS, and watchOS prior to the patched releases (iOS 10.3.2, tvOS 10.2.1, watchOS 3.2.2). The issue is described as an information‑disclosure/memory‑corruption flaw in the AVEVideoEncoder component that can leak kernel addresses and elevate pr...

CVE-2017-6984

CVE-2017-6984 affects WebKit components in multiple Apple platforms (iOS before 10.3.2, Safari before 10.1.1, iTunes on Windows, tvOS before 10.2.1). The issue allows remote code execution or memory corruption via a crafted webpage or site, with the WebKit memory handling/logic vulnerabilities ci...

CVE-2017-2513

CVE-2017-2513 is a use-after-free in SQLite on Apple platforms (iOS before 10.3.2, macOS before 10.12.5, tvOS before 10.2.1, watchOS before 3.2.2) that could enable remote code execution or a denial of service via a crafted SQL statement. Apple security updates fix this: iOS 10.3.2, macOS Sierra ...

CVE-2017-2499

The CVE-2017-2499 entry concerns a memory corruption vulnerability in the WebKit Web Inspector component affecting Apple devices: iOS prior to 10.3.2, Safari prior to 10.1.1, and tvOS prior to 10.2.1. The issue allows an attacker to execute arbitrary unsigned code or cause a denial of service via...

CVE-2017-6997

CVE-2017-6997 affects Apple devices via the AVEVideoEncoder kernel.extension. According to Apple’s security updates for iOS 10.3.2, tvOS 10.2.1, and watchOS 3.2.2, multiple memory corruption issues in AVEVideoEncoder could allow an attacker with local code execution to gain kernel privileges or c...

CVE-2017-6996

CVE-2017-6996 is part of Apple’s AVEVideoEncoder kernel-extension family affecting iOS (before 10.3.2), tvOS (before 10.2.1), and watchOS (before 3.2.2). The issue enables an crafted app to execute arbitrary code with kernel privileges or cause memory corruption leading to denial of service via A...

CVE-2017-6989

CVE-2017-6989 affects Apple AVEVideoEncoder in iOS 10.3.2 and earlier, tvOS 10.2.1 and earlier, watchOS 3.2.2 and earlier. The issue is a kernel‑level memory corruption in the AVEVideoEncoder path that can allow a crafted app to execute code with kernel privileges or cause a memory‑corruption rel...

CVE-2017-6980

CVE-2017-6980 is a WebKit memory corruption vulnerability affecting Apple devices: iOS before 10.3.2, Safari before 10.1.1, and tvOS before 10.2.1. The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web page, as described in Apple advisories and...

CVE-2017-2524

CVE-2017-2524 affects Apple platforms due to a TextInput heap/memory corruption path exposed during NSKeyedArchiver deserialization in TIKeyboardLayout (TextInput). Apple docs and security updates (tvOS 10.2.1, iOS 10.3.2, macOS 10.12.5, watchOS 3.2.2) describe memory corruption that can lead to ...

CVE-2017-2504

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS UXSS attacks via a crafted web site that improperly...