CVE-2016-4665

An issue was discovered in certain Apple products. iOS before 10.1 is affected. tvOS before 10.0.1 is affected. watchOS before 3.1 is affected. The issue involves the "Sandbox Profiles" component, which allows attackers to read audio-recording metadata via a crafted app...

CVE-2017-2369

The CVE-2017-2369 entry affects WebKit in Apple products (iOS < 10.2.1, Safari < 10.0.3, tvOS

CVE-2017-2363

CVE-2017-2363 affects Apple WebKit components across iOS (iOS before 10.2.1), Safari (before 10.0.3), tvOS (before 10.1.1) and watchOS (before 3.1.3). The issue permits a remote attacker to bypass the Same Origin Policy and exfiltrate sensitive data via a crafted web site, due to a WebKit prototy...

CVE-2017-2355

CVE-2017-2355 affects WebKit in Apple ecosystems (iOS before 10.2.1; Safari before 10.0.3; iCloud before 6.1.1; iTunes before 12.5.5; tvOS before 10.1.1). The issue enables remote code execution or a denial of service via crafted web content, due to multiple memory corruption and related reliabil...

CVE-2017-2350

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted...

CVE-2017-2355

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. iCloud before 6.1.1 is affected. iTunes before 12.5.5 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute...

CVE-2017-2370

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. macOS before 10.12.3 is affected. tvOS before 10.1.1 is affected. watchOS before 3.1.3 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or...

CVE-2017-2350

Affected products: iOS <10.2.1, Safari <10.0.3, tvOS

CVE-2016-7584

CVE-2016-7584 affects Apple platforms (iOS before 10.1, macOS before 10.12.1, tvOS before 10.0.1, watchOS before 3.1) in the AppleMobileFileIntegrity component. Root cause: a validation issue in handling code signatures that allows a signed executable to be substituted if it uses the same team ID...

CVE-2016-7584

An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. tvOS before 10.0.1 is affected. watchOS before 3.1 is affected. The issue involves the "AppleMobileFileIntegrity" component, which allows remote attackers to spoof signed code by usin...

CVE-2016-4680

CVE-2016-4680 affects Apple kernels across iOS (pre-10.1), tvOS (pre-10.0.1), and watchOS (pre-3.1). The vulnerability exposes kernel memory via a crafted app due to multiple input-validation issues in MIG-generated code, enabling a local attacker to disclose kernel memory. Apple addressed this i...

CVE-2016-4613

CVE-2016-4613 affects Apple WebKit components in Safari (<10.0.1), iCloud (<6.0.1), iTunes (<12.5.2), and tvOS (

CVE-2016-7626

An issue was discovered in certain Apple products. iOS before 10.2 is affected. tvOS before 10.1 is affected. watchOS before 3.1.1 is affected. The issue involves the "Profiles" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...

CVE-2016-7578

An issue was discovered in certain Apple products. iOS before 10.1 is affected. Safari before 10.0.1 is affected. iCloud before 6.0.1 is affected. iTunes before 12.5.2 is affected. tvOS before 10.0.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute...

CVE-2016-4688

CVE-2016-4688 affects FontParser in macOS (macOS Sierra 10.12.3 security content). The issue: memory corruption/buffer handling in font file processing, enabling remote code execution when a crafted font is opened. Apple references multiple FontParser CVEs (including 2017-2406/2407/2439/2487, etc...

CVE-2016-4764

CVE-2016-4764 concerns WebKit in Apple platforms (iOS 10 and Safari 10 predecessors, tvOS 10, iTunes 12.5.1) with remote code execution and memory corruption via crafted web content. The issue is tracked across multiple vendors/documents; Apple advisories for iOS 10/tvOS 10 describe patches and m...

CVE-2017-2350

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted...

CVE-2017-2362

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...

CVE-2017-2354

CVE-2017-2354 affects WebKit in multiple Apple products (iOS, Safari, iCloud, iTunes, tvOS). A memory-corruption/remote-code-execution vector via crafted web content could crash or execute arbitrary code. Affected versions include iOS prior to 10.2.1, Safari prior to 10.0.3, iCloud prior to 6.1.1...

CVE-2017-2360

CVE-2017-2360 affects Apple devices with Kernel routing as described: iOS before 10.2.1, macOS before 10.12.3, tvOS before 10.1.1, and watchOS before 3.1.3. The issue allows a crafted app to execute arbitrary code in kernel mode or cause a denial of service via use-after-free. Apple advisories sh...