Memory corruption

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Audio" component. It allows remote attackers to execute arbitrary code or cause a denial of servi...

Memory corruption

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "FontParser" component. It allows remote attackers to execute arbitrary code or cause a denial of...

Buffer overflow

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Kernel" component. A buffer overflow allows attackers to execute arbitrary code in a privileged...

Memory corruption

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "CoreGraphics" component. It allows remote attackers to execute arbitrary code or cause a denial of...

Memory corruption

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "FontParser" component. It allows remote attackers to execute arbitrary code or cause a denial of...

Memory corruption

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause...

Memory corruption

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "CoreText" component. It allows remote attackers to execute arbitrary code or cause a denial of...

Memory corruption

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "FontParser" component. It allows remote attackers to execute arbitrary code or cause a denial of...

Memory corruption

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause...

UBUNTU-CVE-2017-2479

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. iCloud before 6.2 on Windows is affected. iTunes before 12.6 on Windows is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers ...

DEBIAN-CVE-2017-2395

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...

CVE-2017-2463

CVE-2017-2463 affects Apple WebKit in multiple products: iOS before 10.3, Safari before 10.1, iCloud on Windows, iTunes on Windows, and tvOS before 10.2. The issue is a memory-corruption/use-after-free weakness in WebKit that could allow remote code execution or a denial of service via a crafted ...

CVE-2017-2465

CVE-2017-2465 affects WebKitGTK+ (WebKitGTK+ before 2.16.1) with remote arbitrary code execution via crafted web content. Upstream fix is in WebKitGTK+ 2.16.1; distributions (e.g., Arch/Ubuntu/Gentoo advisories) note multiple WebKit GTK+ vulnerabilities and require upgrading to the fixed version ...

CVE-2017-2386

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web...

CVE-2017-2454

CVE-2017-2454 affects WebKit in Apple products (iOS 10.x, Safari 10.x, tvOS 10.x). A crafted web site could execute arbitrary code or cause memory corruption and a crash. Apple released fixes in iOS 10.3, tvOS 10.2, and Safari/macOS security updates (per HT207600/HT207617). Remediation: update to...

CVE-2017-2450

CVE-2017-2450 affects Apple platforms (iOS <10.3; macOS <10.12.4; tvOS <10.2; watchOS

CVE-2017-2460

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...

CVE-2017-2490

CVE-2017-2490 is a kernel vulnerability in macOS/iOS/watchOS/tvOS involving the FSEVENTS device. Connected data identifies a double-free race in fsevents locking: two threads may read the same devices_not_to_watch pointer at the (a) point and free it at (d) without proper protection, creating a u...

CVE-2017-2479

CVE-2017-2479 affects Apple's WebKit stack across several OSes (iOS, Safari, iCloud/Windows, iTunes/Windows, tvOS). The issue allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site. The connected Apple security entries indicate remediation...

CVE-2017-2474

CVE-2017-2474 affects Apple devices (iOS, macOS, tvOS, watchOS) with kernel (XNU) memory corruption via an off-by-one error in the SIOCGIFORDER ioctl. The bug writes one entry beyond the allocated ordered_indices buffer because the loop uses a > comparison instead of >=, causing out-of-boun...