CVE-2017-2468

CVE-2017-2468 affects WebKit on iOS (before 10.3), Safari (before 10.1), and tvOS (before 10.2). It permits remote attackers to execute arbitrary code or cause memory corruption and application crashes via a crafted web site. Root cause: memory corruption in WebKit components leading to code exec...

CVE-2017-2462

CVE-2017-2462 affects multiple Apple platforms via the Audio component. A crafted audio file may trigger memory corruption, enabling remote code execution or denial of service. Affected: iOS < 10.3, macOS < 10.12.4, tvOS < 10.2, watchOS

CVE-2017-2451

CVE-2017-2451 affects multiple Apple platforms (iOS < 10.3, macOS < 10.12.4, tvOS < 10.2, watchOS

CVE-2017-2467

CVE-2017-2467 affects Apple platforms (iOS <10.3, macOS <10.12.4, tvOS <10.2, watchOS

CVE-2017-2459

CVE-2017-2459 affects WebKit in Apple products (iOS before 10.3, Safari before 10.1, tvOS before 10.2). The issue enables remote code execution or memory corruption leading to application crashes via a crafted webpage. Root cause described as memory corruption in WebKit/component handling of web ...

CVE-2017-2444

CVE-2017-2444 affects Apple platforms (iOS before 10.3, Safari before 10.1, tvOS before 10.2, watchOS before 3.2) via the CoreGraphics/WebKit stack. The issue permits remote code execution or memory corruption leading to application crashes when processing crafted web content. Apple’s advisories ...

CVE-2017-2406

CVE-2017-2406 (FontParser) affects Apple devices: iOS before 10.3, macOS before 10.12.4, tvOS before 10.2, and watchOS before 3.2. The vulnerability, in the FontParser component, allows remote attackers to cause memory corruption and either execute arbitrary code or trigger a denial of service vi...

CVE-2017-2473

CVE-2017-2473 is a kernel memory corruption/out-of-bounds read vulnerability affecting Apple platforms (iOS before 10.3, macOS before 10.12.4, tvOS before 10.2, watchOS before 3.2). The root cause is improper bounds checking in necp_client_copy_interface: an attacker-controlled interface_index ca...

CVE-2017-2466

CVE-2017-2466 affects WebKit in Apple products (iOS before 10.3, Safari before 10.1, tvOS before 10.2). The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site, due to memory corruption in WebKit. Apple patches are documented in HT207600 (Sa...

CVE-2017-2485

CVE-2017-2485 affects multiple Apple platforms via the Security component: a crafted X.509 certificate can cause remote code execution or memory corruption leading to an app crash. Affected products include iOS before 10.3, macOS before 10.12.4, tvOS before 10.2, and watchOS before 3.2. The issue...

CVE-2017-2435

CVE-2017-2435 relates to a CoreText memory corruption issue in Apple OSes. A crafted font file could allow remote attackers to execute arbitrary code or cause a denial of service on affected platforms. The vulnerability affects iOS before 10.3, macOS before 10.12.4, tvOS before 10.2, and watchOS ...

CVE-2017-2401

CVE-2017-2401 affects Apple devices (iOS <10.3, macOS <10.12.4, tvOS <10.2, watchOS

CVE-2017-2485

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Security" component. It allows remote attackers to execute arbitrary code or cause a denial of...

CVE-2017-2476

CVE-2017-2476 affects WebKit in Apple products (iOS pre-10.3, Safari pre-10.1, tvOS pre-10.2). Root cause: type confusion in WebKit; exploit via crafted web content can trigger remote code execution, memory corruption, or application crash. Remediation: update to patched versions per Apple adviso...

CVE-2017-2464

CVE-2017-2464 affects WebKit components used by Apple iOS (before 10.3), Safari (before 10.1), and tvOS (before 10.2). Root cause is memory corruption/validation issues in WebKit leading to arbitrary code execution or memory corruption with crafted web content. Apple patched this in iOS 10.3, Saf...

CVE-2017-2432

CVE-2017-2432 affects Apple ImageIO in iOS <10.3, macOS <10.12.4, tvOS <10.2, and watchOS

CVE-2017-2469

CVE-2017-2469 affects Apple’s WebKit components in iOS (pre-10.3), Safari (pre-10.1), and tvOS (pre-10.2). A memory corruption issue in WebKit may allow remote attackers to execute arbitrary code or cause a denial of service via a crafted web site. Exploitation was observed in public disclosures ...

CVE-2017-2479

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. iCloud before 6.2 on Windows is affected. iTunes before 12.6 on Windows is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers ...

CVE-2017-2461

CVE-2017-2461 affects CoreText in Apple OSes: iOS 10.3 and earlier, macOS 10.12.4 and earlier, tvOS 10.2 and earlier, watchOS 3.2 and earlier. The issue enables remote denial of service via a crafted text message (resource exhaustion). Apple’s security updates patch this by updating to macOS 10.1...

CVE-2017-2386

CVE-2017-2386 is a WebKit issue affecting Apple platforms (iOS before 10.3, Safari before 10.1, tvOS before 10.2) that allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site. Root cause: memory corruption/validation issues in WebKit compon...