CVE-2016-4591

CVE-2016-4591 is a WebKit flaw affecting Apple platforms: WebKit in iOS prior to 9.3.3, Safari prior to 9.1.2, and tvOS prior to 9.2.2 mishandles the location variable, enabling remote attackers to access the local filesystem via unspecified vectors. Public documentation in Apple security notes a...

CVE-2016-4610

CVE-2016-4610 affects libxslt in multiple Apple platforms: iOS (pre-9.3.3), OS X (pre-10.11.6), iTunes (pre-12.4.2 on Windows), iCloud (pre-5.2.1 on Windows), tvOS (pre-9.2.2), and watchOS (pre-2.2.2). The vulnerability allows remote attackers to cause a denial of service through memory corruptio...

CVE-2016-1865

CVE-2016-1865 affects Apple kernel: iOS <9.3.3, OS X <10.11.6, tvOS <9.2.2, watchOS

CVE-2016-4632

CVE-2016-4632 affects ImageIO in Apple iOS <9.3.3, OS X <10.11.6, tvOS <9.2.2, and watchOS

CVE-2016-1863

CVE-2016-1863 is a local kernel memory corruption vulnerability affecting Apple OS components. It is listed under Kernel for multiple Apple platforms (iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, watchOS before 2.2.2). Exploitation was demonstrated (exploitable locally per exploit-db...

CVE-2016-4582

CVE-2016-4582 affects Apple kernel components across iOS ≤9.3.3, OS X ≤10.11.6, tvOS ≤9.2.2, and watchOS ≤2.2.2. Description: local memory corruption may let a user escalate privileges or cause a denial of service; vectors are unspecified and separate from CVE-2016-1863 and CVE-2016-4653. In Appl...

CVE-2016-4626

IOHIDFamily in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows local users to gain privileges or cause a denial of service NULL pointer dereference via unspecified vectors...

CVE-2016-4615

CVE-2016-4615 is a libxml2 memory corruption vulnerability referenced in Apple security updates for iOS 9.3.3, OS X 10.11.6, iTunes Windows 12.4.2, iCloud Windows 5.2.1, tvOS 9.2.2, and watchOS 2.2.2. Descriptions indicate a remote attacker could trigger memory corruption with potential denial of...

CVE-2016-4594

CVE-2016-4594 corresponds to an unauthorized access issue in Apple’s Sandbox Profiles component. The vulnerability enables a local attacker to access the process list via a crafted app making privileged API calls. Affected platforms include iOS prior to 9.3.3, OS X prior to 10.11.6, tvOS prior to...

CVE-2016-4589

CVE-2016-4589 affects WebKit in Apple iOS prior to 9.3.3, Safari prior to 9.1.2, and tvOS prior to 9.2.2. The vulnerability allows a remote attacker to execute arbitrary code or cause a memory corruption-based denial of service via a crafted website. Root cause details are not expanded beyond mem...

CVE-2016-4583

CVE-2016-4583 is a WebKit/SVG timing-based information disclosure in Apple WebKit components. Affected products include iOS prior to 9.3.3, Safari prior to 9.1.2, and tvOS prior to 9.2.2. The flaw enables a remote attacker to bypass the Same Origin Policy and obtain image data from a site the use...

CVE-2016-4592

WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to cause a denial of service memory consumption via a crafted web site...

CVE-2016-4622

WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2016-4589, CVE-2016-4623, and CVE-2016-4624...

CVE-2016-4623

WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2016-4589, CVE-2016-4622, and CVE-2016-4624...

CVE-2016-4585

Cross-site scripting XSS vulnerability in the WebKit Page Loading implementation in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to inject arbitrary web script or HTML via an HTTP response specifying redirection that is mishandled by Safari...

CVE-2016-4588

WebKit in Apple tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site...

CVE-2016-4592

CVE-2016-4592 affects WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2. The issue allows a remote attacker to cause a denial of service via memory consumption when visiting a crafted website. Public sources describe the vulnerability as a memory‑consumption/DoS issue i...

CVE-2016-4586

CVE-2016-4586 affects WebKit in Apple Safari prior to 9.1.2 and tvOS prior to 9.2.2. A crafted website could cause remote code execution or memory corruption. The issue is documented by Apple in security updates for Safari 9.1.2 and tvOS 9.2.2 (references include HT206905 and HT206900). Impact is...

CVE-2016-4653

CVE-2016-4653 affects Apple’s kernel across iOS (before 9.3.3), OS X (before 10.11.6), tvOS (before 9.2.2), and watchOS (before 2.2.2). Root cause: memory corruption via unspecified vectors; results include local privilege escalation or potential denial of service. Remediation: apply the correspo...

CVE-2016-4585

CVE-2016-4585 targets WebKit Page Loading in Apple platforms: iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2. Root cause is mishandling of HTTP redirect responses by Safari, enabling cross-site scripting (XSS) via injected web script or HTML in the redirected page. The vulnerability...