103 matches found
CVE-2017-7113
An issue was discovered in certain Apple products. iOS before 11.1 is affected. The issue involves the "UIKit" component. It allows attackers to bypass intended read restrictions for secure text fields via vectors involving a focus-change event...
CVE-2017-7113: Exposure of Sensitive Information to an Unauthorized Actor
An issue was discovered in certain Apple products. iOS before 11.1 is affected. The issue involves the "UIKit" component. It allows attackers to bypass intended read restrictions for secure text fields via vectors involving a focus-change event...
Apple iOS < 10.0 Multiple Vulnerabilities
Binary data 9619.prm...
CVE-2016-4749
Printing UIKit in Apple iOS before 10 mishandles environment variables, which allows local users to discover cleartext AirPrint preview content by reading a temporary file...
CVE-2016-4749
Printing UIKit in Apple iOS before 10 mishandles environment variables, which allows local users to discover cleartext AirPrint preview content by reading a temporary file...
Apple iOS Security Restriction Bypass Vulnerability (CNVD-2016-07686)
Apple iOS is an operating system developed by Apple for mobile devices. A security restriction bypass vulnerability exists in the Printing UIKit in Apple iOS versions prior to 10. An attacker can exploit this vulnerability to bypass security restrictions, perform unauthorized actions, or obtain...
CVE-2016-4749: Exposure of Sensitive Information to an Unauthorized Actor
Printing UIKit in Apple iOS before 10 mishandles environment variables, which allows local users to discover cleartext AirPrint preview content by reading a temporary file...
Apple iOS < 10 Multiple Vulnerabilities (BlueBorne)
Binary data appleios100check.nbin...
Apple iOS < 8.4.1 Multiple Vulnerabilities
Binary data 8978.prm...
CVE-2015-3758
UIKit WebView in Apple iOS before 8.4.1 allows attackers to bypass an intended user-confirmation requirement and initiate arbitrary FaceTime calls via an app that provides a crafted URL...
CVE-2015-3758
CVE-2015-3758 affects UIKit WebView in iOS prior to 8.4.1. The vulnerability lets an attacker bypass the user-confirmation requirement and initiate a FaceTime call via an app supplying a crafted URL, due to parsing/validation issues in WebView URL handling. Impact: potential unauthorized FaceTime...
CVE-2015-3758: Improper Input Validation
UIKit WebView in Apple iOS before 8.4.1 allows attackers to bypass an intended user-confirmation requirement and initiate arbitrary FaceTime calls via an app that provides a crafted URL...
Apple iOS < 8.4.1 Multiple Vulnerabilities
Binary data appleios841check.nbin...
CVE-2015-1116
The UIKit View component in Apple iOS before 8.3 displays unblurred application snapshots in the Task Switcher, which makes it easier for physically proximate attackers to obtain sensitive information by reading the device screen...
Information disclosure
The UIKit View component in Apple iOS before 8.3 displays unblurred application snapshots in the Task Switcher, which makes it easier for physically proximate attackers to obtain sensitive information by reading the device screen...
Apple iOS < 8.3 Multiple Vulnerabilities
Binary data appleios83check.nbin...
CVE-2015-1116: Exposure of Sensitive Information to an Unauthorized Actor
The UIKit View component in Apple iOS before 8.3 displays unblurred application snapshots in the Task Switcher, which makes it easier for physically proximate attackers to obtain sensitive information by reading the device screen...
Apple iOS Task Switcher Sensitive Information Disclosure Vulnerability
Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A security vulnerability exists in Apple iOS UIKit. A remote attacker can exploit the vulnerability to expose data in application snapshots to Task Switcher to obtain sensitive information...
CVE-2012-3746: Undefined Security Weakness
UIWebView in UIKit in Apple iOS before 6 does not properly use the Data Protection feature, which allows context-dependent attackers to obtain cleartext file content by leveraging direct access to a device's filesystem...