CVE-2016-4680

An issue was discovered in certain Apple products. iOS before 10.1 is affected. tvOS before 10.0.1 is affected. watchOS before 3.1 is affected. The issue involves the "Kernel" component. It allows attackers to obtain sensitive information from kernel memory via a crafted app...

CVE-2016-4673

CVE-2016-4673 (Apple CoreGraphics JPEG bug) affects multiple Apple OSes: iOS before 10.1, macOS before 10.12.1, tvOS before 10.0.1, watchOS before 3.1. A memory corruption issue in CoreGraphics may allow arbitrary code execution or memory corruption leading to a crash when processing a crafted JP...

CVE-2016-4675

CVE-2016-4675 affects Apple platforms via the libxpc component. The issue is a logic flaw that could allow an attacker to execute arbitrary code in a privileged context when a crafted app is involved, on macOS Sierra 10.12.x, iOS 10.x, tvOS 10.x, and watchOS 3.x. Apple addressed this with securit...

CVE-2016-4677

An issue was discovered in certain Apple products. iOS before 10.1 is affected. Safari before 10.0.1 is affected. tvOS before 10.0.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...

CVE-2016-4666

CVE-2016-4666 affects Apple WebKit components (iOS prior to 10.1, Safari prior to 10.0.1, tvOS prior to 10.0.1) and can lead to remote code execution or memory corruption via malicious web content. Public advisories and OpenVAS/Nessus listings corroborate the WebKit-based issue and reference Appl...

CVE-2016-4664

An issue was discovered in certain Apple products. iOS before 10.1 is affected. tvOS before 10.0.1 is affected. watchOS before 3.1 is affected. The issue involves the "Sandbox Profiles" component, which allows attackers to read photo-directory metadata via a crafted app...

CVE-2016-4665

CVE-2016-4665 is an Apple vulnerability affecting the Sandbox Profiles component, allowing a crafted app to read audio-recording metadata on affected systems. The issue is listed for iOS prior to 10.1, tvOS prior to 10.0.1, and watchOS prior to 3.1. Affected products include iPhone/iPad/iPod touc...

CVE-2017-2354

CVE-2017-2354 affects WebKit in multiple Apple products (iOS, Safari, iCloud, iTunes, tvOS). A memory-corruption/remote-code-execution vector via crafted web content could crash or execute arbitrary code. Affected versions include iOS prior to 10.2.1, Safari prior to 10.0.3, iCloud prior to 6.1.1...

CVE-2017-2350

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted...

CVE-2017-2362

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...

CVE-2017-2356

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. iCloud before 6.1.1 is affected. iTunes before 12.5.5 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute...

CVE-2017-2356

The CVE-2017-2356 issue affects Apple’s WebKit on multiple platforms (iOS before 10.2.1, Safari before 10.0.3, iCloud 6.1.1, iTunes 12.5.5, tvOS before 10.1.1). The underlying vulnerability is within WebKit and can be triggered by a crafted web site to perform remote code execution or cause a den...

CVE-2017-2365

CVE-2017-2365 affects Apple WebKit components across iOS (pre-10.2.1), Safari (pre-10.0.3), and tvOS (pre-10.1.1). The issue enables cross-origin data exfiltration via crafted web content and is described in Apple’s security content for iOS 10.2.1 and tvOS 10.1.1. Apple indicates patches exist in...

CVE-2017-2356

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. iCloud before 6.1.1 is affected. iTunes before 12.5.5 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute...

CVE-2017-2370

CVE-2017-2370 is a kernel vulnerability affecting iOS (pre-10.2.1), macOS (pre-10.12.3), tvOS (pre-10.1.1) and watchOS (pre-3.1.3). It stems from a linear heap buffer overflow in the kernel, triggered via an attacker-controlled length argument in a copyin-like path within mach_voucher_extract_att...

CVE-2016-7613

CVE-2016-7613 affects Apple OS X/macOS/iOS family. Apple documents show kernel-level local code execution due to multiple object-lifetime issues in MIG-generated code when spawning new processes. Affected: macOS Sierra 10.12 (and earlier OS X versions), iOS 10.1, watchOS/tvOS/macOS variants; Atta...

CVE-2016-7626

CVE-2016-7626 affects Apple platforms (iOS < 10.2, tvOS < 10.1, watchOS

CVE-2016-7579

CVE-2016-7579 affects Apple platforms via the CFNetwork Proxies component. A phishing issue in handling proxy credentials could let an attacker in a privileged network position leak sensitive user information by spoofing a proxy password prompt. Affected: iOS before 10.1, macOS before 10.12.1, tv...

CVE-2016-7578

CVE-2016-7578 affects Apple WebKit in multiple products (iOS <10.1, Safari <10.0.1, iCloud <6.0.1, iTunes <12.5.2, tvOS

CVE-2016-4660

An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. tvOS before 10.0.1 is affected. watchOS before 3.1 is affected. The issue involves the "FontParser" component. It allows remote attackers to obtain sensitive information or cause a...