CVE-2017-2415

CVE-2017-2415 is a WebKit type-confusion vulnerability affecting Apple products: iOS <10.3, Safari <10.1, tvOS <10.2, and watchOS

CVE-2017-2440

CVE-2017-2440 is described in Apple advisories as a Kernel-level integer overflow issue that could allow a crafted app to execute arbitrary code with kernel privileges or cause a denial of service. Affected platforms include iOS prior to 10.3, macOS prior to 10.12.4, tvOS prior to 10.2, and watch...

CVE-2017-2428

CVE-2017-2428 affects nghttp2 before 1.17.0 in the HTTPProtocol component across Apple products (iOS <10.3, macOS <10.12.4, tvOS <10.2, watchOS

CVE-2017-2490

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause...

CVE-2017-2483

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Kernel" component. A buffer overflow allows attackers to execute arbitrary code in a privileged...

CVE-2017-2474

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Kernel" component. An off-by-one error allows attackers to execute arbitrary code in a privileged...

CVE-2017-2458

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Keyboards" component. A buffer overflow allows attackers to execute arbitrary code in a privilege...

CVE-2017-2379

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Carbon" component. It allows remote attackers to execute arbitrary code or cause a denial of...

CVE-2017-2471

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. watchOS before 3.2 is affected. The issue involves the "WebKit" component. A use-after-free vulnerability allows remote attackers to execute arbitrary code via a crafted web site...

CVE-2017-2435

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "CoreText" component. It allows remote attackers to execute arbitrary code or cause a denial of...

CVE-2017-2440

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause...

CVE-2017-2462

CVE-2017-2462 affects multiple Apple platforms via the Audio component. A crafted audio file may trigger memory corruption, enabling remote code execution or denial of service. Affected: iOS < 10.3, macOS < 10.12.4, tvOS < 10.2, watchOS

CVE-2017-2401

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause...

CVE-2017-2416

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "ImageIO" component. It allows remote attackers to execute arbitrary code or cause a denial of...

CVE-2017-2471

CVE-2017-2471 is a use-after-free in WebKit affecting Apple WebKit-based components (iOS 10.3, Safari 10.1, watchOS 3.2). It allows remote code execution via a crafted web site. Public evidence includes an exploitation entry (Exploit-DB) and multiple advisories linking WebKitGTK+ variants. Remedi...

CVE-2017-2458

CVE-2017-2458 (Keyboards) is a buffer overflow in Apple’s Keyboards component affecting iOS before 10.3, macOS before 10.12.4, tvOS before 10.2, and watchOS before 3.2, enabling arbitrary code execution in a privileged context via a crafted app. Public documents identify the issue and note patche...

CVE-2017-2482

CVE-2017-2482 is a kernel heap overflow in the BSD Packet Filter (bpf) BIOCSBLEN handling in Apple’s XNU kernel. The vulnerability allows an unauthenticated user-space process to manipulate the kernel heap by changing the bpf buffer size and reattaching interfaces, enabling potential kernel-level...

CVE-2017-2451

CVE-2017-2451 affects multiple Apple platforms (iOS < 10.3, macOS < 10.12.4, tvOS < 10.2, watchOS

CVE-2017-2407

CVE-2017-2407 affects Apple platforms via the FontParser component. The issue allows remote attackers to craft a font file that could cause memory corruption, leading to arbitrary code execution or an application crash (DoS). Affected products include iOS before 10.3, macOS before 10.12.4, tvOS b...

CVE-2017-2490

CVE-2017-2490 is a kernel vulnerability in macOS/iOS/watchOS/tvOS involving the FSEVENTS device. Connected data identifies a double-free race in fsevents locking: two threads may read the same devices_not_to_watch pointer at the (a) point and free it at (d) without proper protection, creating a u...