CVE-2017-2379

Consolidated from sources: CVE-2017-2379 affects Apple OS components using the Carbon font handling. The issue enables remote code execution or denial of service when processing a crafted .dfont file. Affected platforms include iOS prior to 10.3, macOS prior to 10.12.4, tvOS prior to 10.2, and wa...

CVE-2017-2367

CVE-2017-2367 is documented as a WebKit/Safari family issue affecting Apple platforms (iOS before 10.3, Safari before 10.1, tvOS before 10.2). The description states a remote attacker can bypass the Same Origin Policy and obtain sensitive information via a crafted website. Connected docs enumerat...

CVE-2017-2395

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...

CVE-2017-2396

CVE-2017-2396 affects Apple WebKit in iOS (pre-10.3), Safari (pre-10.1), and tvOS (pre-10.2). Remote code execution or memory corruption leading to application crash via a crafted web site is described; root cause is memory corruption in WebKit when handling web content. Remediation is available:...

CVE-2017-2386

CVE-2017-2386 is a WebKit issue affecting Apple platforms (iOS before 10.3, Safari before 10.1, tvOS before 10.2) that allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site. Root cause: memory corruption/validation issues in WebKit compon...

CVE-2017-2485

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Security" component. It allows remote attackers to execute arbitrary code or cause a denial of...

CVE-2017-2485

CVE-2017-2485 affects multiple Apple platforms via the Security component: a crafted X.509 certificate can cause remote code execution or memory corruption leading to an app crash. Affected products include iOS before 10.3, macOS before 10.12.4, tvOS before 10.2, and watchOS before 3.2. The issue...

CVE-2017-2476

CVE-2017-2476 affects WebKit in Apple products (iOS pre-10.3, Safari pre-10.1, tvOS pre-10.2). Root cause: type confusion in WebKit; exploit via crafted web content can trigger remote code execution, memory corruption, or application crash. Remediation: update to patched versions per Apple adviso...

CVE-2017-2473

CVE-2017-2473 is a kernel memory corruption/out-of-bounds read vulnerability affecting Apple platforms (iOS before 10.3, macOS before 10.12.4, tvOS before 10.2, watchOS before 3.2). The root cause is improper bounds checking in necp_client_copy_interface: an attacker-controlled interface_index ca...

CVE-2017-2479

CVE-2017-2479 affects Apple's WebKit stack across several OSes (iOS, Safari, iCloud/Windows, iTunes/Windows, tvOS). The issue allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site. The connected Apple security entries indicate remediation...

CVE-2017-2487

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "FontParser" component. It allows remote attackers to execute arbitrary code or cause a denial of...

CVE-2017-2459

CVE-2017-2459 affects WebKit in Apple products (iOS before 10.3, Safari before 10.1, tvOS before 10.2). The issue enables remote code execution or memory corruption leading to application crashes via a crafted webpage. Root cause described as memory corruption in WebKit/component handling of web ...

CVE-2017-2444

CVE-2017-2444 affects Apple platforms (iOS before 10.3, Safari before 10.1, tvOS before 10.2, watchOS before 3.2) via the CoreGraphics/WebKit stack. The issue permits remote code execution or memory corruption leading to application crashes when processing crafted web content. Apple’s advisories ...

CVE-2017-2439

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "FontParser" component. It allows remote attackers to obtain sensitive information or cause a deni...

CVE-2017-2440

CVE-2017-2440 is described in Apple advisories as a Kernel-level integer overflow issue that could allow a crafted app to execute arbitrary code with kernel privileges or cause a denial of service. Affected platforms include iOS prior to 10.3, macOS prior to 10.12.4, tvOS prior to 10.2, and watch...

CVE-2017-2463

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. iCloud before 6.2 on Windows is affected. iTunes before 12.6 on Windows is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers ...

CVE-2017-2367

Removed by vendor...

CVE-2017-2445

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS UXSS attacks via crafted frame objects...

CVE-2017-2455

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...

CVE-2017-2460

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...