PT-2019-19200 · Apple +6 · Watchos +7

Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 6.1 Description: A logic issue was addressed with improved state management. Processing maliciously crafted web content may lead to universal cross site scripting. Recommendations: For versions prior to 6.1, update t...

CVE-2018-4162

An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "WebKit"...

CVE-2017-13884

An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "WebKit"...

CVE-2017-7063

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. watchOS before 3.2.3 is affected. The issue involves the "Messages" component. It allows remote attackers to cause a denial of service memory consumption and application crash...

CVE-2017-2451

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Security" component. It allows attackers to execute arbitrary code in a privileged context or cau...

CVE-2016-7662

An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "Security" component, which allows remote attackers to spoof certificates via unspecified vectors...

Apple iOS/WatchOS/tvOS Memory Corruption Vulnerability

Apple iOS is an operating system developed by Apple for mobile devices. A memory corruption vulnerability exists in Apple iOS/WatchOS/tvOS, which can be exploited by an attacker to execute arbitrary code or cause a denial of service memory corruption via a specific certificate file...

Apple WatchOS Denial of Service Vulnerability (CNVD-2016-02948)

Apple watchOS is a smartwatch operating system developed by Apple. A denial of service vulnerability exists in Apple watchOS versions 2.0 and 2.1. The failure to encrypt the alarm function input allows an attacker to save text by entering a malicious loop...

CVE-2015-7059

The ASN.1 decoder in Apple OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted certificate, a different vulnerability than CVE-2015-7060 and CVE-2015-7061...

Apple iOS/OS X/watchOS ImageIO memory corruption vulnerability (CNVD-2015-07100)

OS X formerly Mac OS X is the latest version of Apple's proprietary operating system for the Macintosh computer. iOS is an operating system developed by Apple for mobile devices. A security vulnerability exists in Apple iOS versions prior to 9.1, OS X versions prior to 10.11.1, and watchOS versio...