CVE-2017-2451

CVE-2017-2451 affects multiple Apple platforms (iOS < 10.3, macOS < 10.12.4, tvOS < 10.2, watchOS

CVE-2017-2441

CVE-2017-2441 involves a use-after-free in the libc++abi demangling path across Apple products (iOS before 10.3, macOS before 10.12.4, tvOS before 10.2, watchOS before 3.2). A remote attacker could execute arbitrary code by presenting a crafted C++ application. Public sources link this to Apple s...

CVE-2017-2458

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Keyboards" component. A buffer overflow allows attackers to execute arbitrary code in a privilege...

CVE-2017-2416

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "ImageIO" component. It allows remote attackers to execute arbitrary code or cause a denial of...

CVE-2017-2490

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause...

CVE-2017-2444

CVE-2017-2444 affects Apple platforms (iOS before 10.3, Safari before 10.1, tvOS before 10.2, watchOS before 3.2) via the CoreGraphics/WebKit stack. The issue permits remote code execution or memory corruption leading to application crashes when processing crafted web content. Apple’s advisories ...

CVE-2017-2485

CVE-2017-2485 affects multiple Apple platforms via the Security component: a crafted X.509 certificate can cause remote code execution or memory corruption leading to an app crash. Affected products include iOS before 10.3, macOS before 10.12.4, tvOS before 10.2, and watchOS before 3.2. The issue...

CVE-2017-2428

CVE-2017-2428 affects nghttp2 before 1.17.0 in the HTTPProtocol component across Apple products (iOS <10.3, macOS <10.12.4, tvOS <10.2, watchOS

CVE-2017-2406

CVE-2017-2406 (FontParser) affects Apple devices: iOS before 10.3, macOS before 10.12.4, tvOS before 10.2, and watchOS before 3.2. The vulnerability, in the FontParser component, allows remote attackers to cause memory corruption and either execute arbitrary code or trigger a denial of service vi...

CVE-2017-2456

CVE-2017-2456 is a kernel race condition in Apple’s XNU mach_msg handling that can enable arbitrary code execution in kernel space via a non-atomic vm_map_copy move optimization. The connected Project Zero analysis details how two concurrent threads may trigger a flawed move path during vm_map_co...

CVE-2017-2467

CVE-2017-2467 affects Apple platforms (iOS <10.3, macOS <10.12.4, tvOS <10.2, watchOS

CVE-2017-2487

CVE-2017-2487 affects Apple platforms (iOS before 10.3, macOS before 10.12.4, tvOS before 10.2, watchOS before 3.2) and targets the FontParser component. The issue allows a remote attacker to execute arbitrary code or cause a denial of service via a crafted font file, caused by memory corruption/...

CVE-2017-2458

CVE-2017-2458 (Keyboards) is a buffer overflow in Apple’s Keyboards component affecting iOS before 10.3, macOS before 10.12.4, tvOS before 10.2, and watchOS before 3.2, enabling arbitrary code execution in a privileged context via a crafted app. Public documents identify the issue and note patche...

CVE-2017-2471

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. watchOS before 3.2 is affected. The issue involves the "WebKit" component. A use-after-free vulnerability allows remote attackers to execute arbitrary code via a crafted web site...

Remote code execution triggered by malformed GIF in ImageIO framework, affecting most iOS/macOS apps

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the “ImageIO” component. It allows remote attackers to execute arbitrary code or cause a denial of...

CVE-2017-2415

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code by leveraging an unspecifie...

UBUNTU-CVE-2017-2471

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. watchOS before 3.2 is affected. The issue involves the "WebKit" component. A use-after-free vulnerability allows remote attackers to execute arbitrary code via a crafted web site...

CVE-2017-2471

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. watchOS before 3.2 is affected. The issue involves the "WebKit" component. A use-after-free vulnerability allows remote attackers to execute arbitrary code via a crafted web site...

Apple Releases Multiple Security Updates

Apple has released security updates for several products to address multiple vulnerabilities. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system. US-CERT encourages users and administrators to review the following Apple Support Articles...

About the security content of watchOS 3.2

About the security content of watchOS 3.2 This document describes the security content of watchOS 3.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...