CVE-2017-2446

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code via a crafted web site that leverages the mishandling of...

CVE-2017-2417

CVE-2017-2417 affects Apple’s CoreGraphics across multiple OSs (iOS, macOS, tvOS, watchOS). The issue allows remote attackers to cause a denial-of-service through an image that triggers infinite recursion in CoreGraphics. Affected: iOS prior to 10.3, macOS prior to 10.12.4, tvOS prior to 10.2, wa...

CVE-2017-2435

CVE-2017-2435 relates to a CoreText memory corruption issue in Apple OSes. A crafted font file could allow remote attackers to execute arbitrary code or cause a denial of service on affected platforms. The vulnerability affects iOS before 10.3, macOS before 10.12.4, tvOS before 10.2, and watchOS ...

CVE-2017-2439

CVE-2017-2439 (FontParser) affects Apple platforms: iOS before 10.3, macOS before 10.12.4, tvOS before 10.2, and watchOS before 3.2. The issue is a memory corruption/out-of-bounds read in FontParser when processing crafted font files, which can enable information disclosure or cause an applicatio...

CVE-2017-2428

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves nghttp2 before 1.17.0 in the "HTTPProtocol" component. It allows remote HTTP/2 servers to have an...

CVE-2017-2395

CVE-2017-2395 is a WebKit vulnerability affecting multiple Apple platforms (iOS 10.3-, Safari 10.1-, tvOS 10.2-) where crafted web content can cause memory corruption leading to arbitrary code execution or a denial of service. Connected docs show broader WebKit exposure across WebKitGTK+/WebKitJS...

CVE-2017-2386

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web...

CVE-2017-2470

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...

CVE-2017-2464

CVE-2017-2464 affects WebKit components used by Apple iOS (before 10.3), Safari (before 10.1), and tvOS (before 10.2). Root cause is memory corruption/validation issues in WebKit leading to arbitrary code execution or memory corruption with crafted web content. Apple patched this in iOS 10.3, Saf...

CVE-2017-2455

CVE-2017-2455 affects WebKit components in Apple products (iOS < 10.3, Safari < 10.1, tvOS

CVE-2017-2454

CVE-2017-2454 affects WebKit in Apple products (iOS 10.x, Safari 10.x, tvOS 10.x). A crafted web site could execute arbitrary code or cause memory corruption and a crash. Apple released fixes in iOS 10.3, tvOS 10.2, and Safari/macOS security updates (per HT207600/HT207617). Remediation: update to...

CVE-2017-2454

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...

CVE-2017-2441

CVE-2017-2441 involves a use-after-free in the libc++abi demangling path across Apple products (iOS before 10.3, macOS before 10.12.4, tvOS before 10.2, watchOS before 3.2). A remote attacker could execute arbitrary code by presenting a crafted C++ application. Public sources link this to Apple s...

CVE-2017-2441

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "libc++abi" component. A use-after-free vulnerability allows remote attackers to execute arbitrary...

CVE-2017-2450

CVE-2017-2450 affects Apple platforms (iOS <10.3; macOS <10.12.4; tvOS <10.2; watchOS

CVE-2017-2450

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "CoreText" component. It allows remote attackers to obtain sensitive information or cause a denial...

CVE-2017-2469

CVE-2017-2469 affects Apple’s WebKit components in iOS (pre-10.3), Safari (pre-10.1), and tvOS (pre-10.2). A memory corruption issue in WebKit may allow remote attackers to execute arbitrary code or cause a denial of service via a crafted web site. Exploitation was observed in public disclosures ...

CVE-2017-2470

CVE-2017-2470 affects WebKit components across Apple devices (iOS before 10.3, Safari before 10.1, tvOS before 10.2). The issue enables remote arbitrary code execution or memory corruption via a crafted web site, potentially crashing the application. Root cause involves memory corruption in WebKi...

CVE-2017-2472

CVE-2017-2472 affects Apple OSes (iOS < 10.3, macOS < 10.12.4, tvOS < 10.2, watchOS

CVE-2017-2394

CVE-2017-2394 affects Apple WebKit components used by Safari, iOS before 10.3, tvOS before 10.2. A crafted web page can cause remote arbitrary code execution or memory corruption leading to a crash. Apple addresses include Safari 10.1, iOS 10.3, and tvOS 10.2 security updates. If exploiting statu...