CVE-2017-7114

An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is affected. tvOS before 11 is affected. watchOS before 4 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denia...

CVE-2017-7080

An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is affected. tvOS before 11 is affected. watchOS before 4 is affected. The issue involves the "Security" component. It allows remote attackers to bypass intended certificate-trust restrictions via a...

CVE-2017-7114

CVE-2017-7114 is a kernel-related vulnerability impacting Apple devices running iOS 11 and earlier, macOS 10.12–10.13, tvOS 11, and watchOS 4. The issue is described as a memory corruption in the Kernel that allows an attacker, via a crafted app, to execute arbitrary code in kernel context or cau...

CVE-2017-7086

Summary (CVE-2017-7086): An issue in the libc glob() implementation affects Apple OSes (iOS prior to 11, macOS prior to 10.13, tvOS prior to 11, watchOS prior to 4). The vulnerability allows a remote attacker to cause a denial of service via a crafted string mishandled by glob(), leading to resou...

CVE-2017-7083

CVE-2017-7083 corresponds to a denial-of-service issue in CFNetwork Proxies affecting Apple devices. The connected Apple security content for iOS 11, macOS 10.13, tvOS 11, and watchOS 4 notes CFNetwork Proxies as the vulnerable component and describes the impact as a denial of service. The CVE en...

CVE-2017-7129

Summary: CVE-2017-7129 concerns the embedded SQLite library in Apple OSes (iOS, macOS, tvOS, watchOS) prior to SQLite 3.19.3. The issue allowed remote attackers to cause a denial of service (application crash) or potentially other impact. Affected products: Apple platforms using SQLite before 3.1...

CVE-2017-7128

CVE-2017-7128 concerns a vulnerability in SQLite used by Apple platforms. Affected products include iOS, macOS, tvOS, and watchOS prior to their 11/4-era updates, where the third-party SQLite library was at risk. The entry notes that versions before 3.19.3 could allow remote attackers to cause an...

CVE-2017-7080

CVE-2017-7080 affects multiple Apple platforms: iOS <11, macOS <10.13, tvOS <11, and watchOS

CVE-2017-7103

CVE-2017-7103 affects Apple devices with the Wi‑Fi component, including iOS < 11, tvOS < 11, and watchOS

CVE-2017-7110

CVE-2017-7110 is a Wi‑Fi driver issue affecting Apple devices (iOS, tvOS, watchOS) where the setVendorIE ioctl path can overflow the heap and leak information. The root cause is insufficient validation of the Vendor IE list: an attacker-controllable count/length can cause out‑of‑bounds reads/writ...

About the security content of watchOS 4.0.1 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

About the security content of watchOS 4.0.1

About the security content of watchOS 4.0.1 This document describes the security content of watchOS 4.0.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...

Remote Wi-Fi Attack Backdoors iPhone 7

Google on Tuesday disclosed details and a proof-of-concept exploit for a Wi-Fi firmware vulnerability in Broadcom chipsets patched this week in iOS 11. The attack enables code execution and persistent presence on a compromised device. “The exploit gains code execution on the Wi-Fi firmware on the...

Apple Releases Security Updates

Apple has released security updates to address vulnerabilities in multiple products. A remote attacker may exploit some of these vulnerabilities to take control of an affected system. US-CERT encourages users and administrators to review the following Apple security pages and apply the necessary...

About the security content of watchOS 4

About the security content of watchOS 4 This document describes the security content of watchOS 4. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

Security research team released 8 Apple iOS security vulnerability: hackers can easily attack-vulnerability warning-the black bar safety net

According to foreign media ZDNet reports, the Israeli mobile security company Zimperium recently released 8 Apple iOS system vulnerabilities, hackers can exploit these vulnerabilities to completely control the user's iOS device, so as to obtain the device's GPS data, photos, and contact...

CVE-2017-7063

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. watchOS before 3.2.3 is affected. The issue involves the "Messages" component. It allows remote attackers to cause a denial of service memory consumption and application crash...

CVE-2017-7069

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or...

CVE-2017-7068

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the "libarchive" component. It allows remote attackers to execute arbitrary code or cause a deni...

CVE-2017-7062

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the "Contacts" component. A buffer overflow allows remote attackers to execute arbitrary code or...