CVE-2017-2415

CVE-2017-2415 is a WebKit type-confusion vulnerability affecting Apple products: iOS <10.3, Safari <10.1, tvOS <10.2, and watchOS

CVE-2017-2439

CVE-2017-2439 (FontParser) affects Apple platforms: iOS before 10.3, macOS before 10.12.4, tvOS before 10.2, and watchOS before 3.2. The issue is a memory corruption/out-of-bounds read in FontParser when processing crafted font files, which can enable information disclosure or cause an applicatio...

CVE-2017-2430

CVE-2017-2430 affects the Audio component in several Apple platforms (iOS before 10.3, macOS before 10.12.4, tvOS before 10.2, watchOS before 3.2). A crafted audio file may allow a remote attacker to execute arbitrary code or cause a memory corruption leading to a denial of service. Apple documen...

CVE-2017-2417

CVE-2017-2417 affects Apple’s CoreGraphics across multiple OSs (iOS, macOS, tvOS, watchOS). The issue allows remote attackers to cause a denial-of-service through an image that triggers infinite recursion in CoreGraphics. Affected: iOS prior to 10.3, macOS prior to 10.12.4, tvOS prior to 10.2, wa...

CVE-2017-2483

CVE-2017-2483 affects Apple kernel on iOS <10.3, macOS <10.12.4, tvOS <10.2 and watchOS

CVE-2017-2446

CVE-2017-2446 affects Apple's WebKit components on iOS <10.3, Safari <10.1 and tvOS

CVE-2017-2394

CVE-2017-2394 affects Apple WebKit components used by Safari, iOS before 10.3, tvOS before 10.2. A crafted web page can cause remote arbitrary code execution or memory corruption leading to a crash. Apple addresses include Safari 10.1, iOS 10.3, and tvOS 10.2 security updates. If exploiting statu...

CVE-2017-2458

CVE-2017-2458 (Keyboards) is a buffer overflow in Apple’s Keyboards component affecting iOS before 10.3, macOS before 10.12.4, tvOS before 10.2, and watchOS before 3.2, enabling arbitrary code execution in a privileged context via a crafted app. Public documents identify the issue and note patche...

CVE-2017-2448

CVE-2017-2448 is an Apple Keychain vulnerability affecting iOS < 10.3, macOS < 10.12.4, and tvOS

CVE-2017-2463

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. iCloud before 6.2 on Windows is affected. iTunes before 12.6 on Windows is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers ...

CVE-2017-2439

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "FontParser" component. It allows remote attackers to obtain sensitive information or cause a deni...

CVE-2017-2447

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to obtain sensitive information or cause a denial of service memory corruption via a...

CVE-2017-2441

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "libc++abi" component. A use-after-free vulnerability allows remote attackers to execute arbitrary...

CVE-2017-2379

Consolidated from sources: CVE-2017-2379 affects Apple OS components using the Carbon font handling. The issue enables remote code execution or denial of service when processing a crafted .dfont file. Affected platforms include iOS prior to 10.3, macOS prior to 10.12.4, tvOS prior to 10.2, and wa...

CVE-2017-2407

CVE-2017-2407 affects Apple platforms via the FontParser component. The issue allows remote attackers to craft a font file that could cause memory corruption, leading to arbitrary code execution or an application crash (DoS). Affected products include iOS before 10.3, macOS before 10.12.4, tvOS b...

CVE-2017-2395

CVE-2017-2395 is a WebKit vulnerability affecting multiple Apple platforms (iOS 10.3-, Safari 10.1-, tvOS 10.2-) where crafted web content can cause memory corruption leading to arbitrary code execution or a denial of service. Connected docs show broader WebKit exposure across WebKitGTK+/WebKitJS...

CVE-2017-2487

CVE-2017-2487 affects Apple platforms (iOS before 10.3, macOS before 10.12.4, tvOS before 10.2, watchOS before 3.2) and targets the FontParser component. The issue allows a remote attacker to execute arbitrary code or cause a denial of service via a crafted font file, caused by memory corruption/...

CVE-2017-2435

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "CoreText" component. It allows remote attackers to execute arbitrary code or cause a denial of...

CVE-2017-2454

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...

CVE-2017-2480

The CVE-2017-2480 entry concerns WebKit in multiple Apple platforms (iOS before 10.3, Safari before 10.1, iCloud/iTunes on Windows, tvOS before 10.2). The issue allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site. Connected documents co...