CVE-2016-4738

CVE-2016-4738 is a memory corruption vulnerability in libxslt. The issue occurs in the XSLT processing runtime library (libxslt) and could allow a remote attacker to execute arbitrary code or cause a denial of service when a crafted web page is processed. Debian’s security advisory DSA-3709-1 con...

CVE-2016-4702

Audio in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...

CVE-2016-4776

The kernel in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows attackers to obtain sensitive memory-layout information or cause a denial of service out-of-bounds read via a crafted app, a different vulnerability than CVE-2016-4773 and CVE-2016-4774...

CVE-2016-4773

The kernel in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows attackers to obtain sensitive memory-layout information or cause a denial of service out-of-bounds read via a crafted app, a different vulnerability than CVE-2016-4774 and CVE-2016-4776...

CVE-2016-4658

xpointer.c in libxml2 before 2.9.5 as used in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3, and other products does not forbid namespace nodes in XPointer ranges, which allows remote attackers to execute arbitrary code or cause a denial of service use-after-free an...

CVE-2016-4753

CVE-2016-4753 affects Apple platforms (iOS 10, macOS 10.12, tvOS 10, watchOS 3) via a validation issue in signed disk images that allowed arbitrary code execution in a privileged context when processing a crafted app. Patches/releases addressing this were provided in Apple's security content (HT2...

CVE-2016-4737

WebKit in Apple iOS before 10, Safari before 10, tvOS before 10, and watchOS before 3 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site...

CVE-2016-4777

The kernel in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows attackers to execute arbitrary code in a privileged context or cause a denial of service invalid pointer dereference via a crafted app...

CVE-2016-4777

CVE-2016-4777 affects the Kernel in watchOS 3 (Apple Watch). The root cause is an untrusted pointer dereference that could allow a local attacker to execute arbitrary code with kernel privileges; Apple addressed this by removing the affected code, mitigating the issue in the watchOS 3 kernel.

CVE-2016-4773

CVE-2016-4773: Kernel memory layout disclosure and potential DoS in Apple platforms. Concrete details show that the issue resides in the kernel across iOS <10, macOS <10.12, tvOS <10, and watchOS

CVE-2016-4718

The CVE-2016-4718 entry concerns a buffer overflow in FontParser that affects multiple Apple platforms when processing malicious font files. Specifically, Apple iOS before 10, macOS (OS X) before 10.12, tvOS before 10, and watchOS before 3 are listed as vulnerable, with the issue allowing a remot...

CVE-2016-4774

CVE-2016-4774 affects Apple’s kernel in iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3. The vulnerability is a kernel memory layout disclosure and out-of-bounds read triggered by a crafted app, enabling attackers to obtain sensitive memory-layout information or cause a den...

CVE-2016-4712

CVE-2016-4712 affects CoreCrypto across Apple platforms (iOS before 10, macOS before 10.12, tvOS before 10, watchOS before 3). The vulnerability is an out-of-bounds write in CoreCrypto that could allow an attacker to execute arbitrary code or cause a denial of service via a crafted application. R...

CVE-2016-4658

xpointer.c in libxml2 before 2.9.5 as used in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3, and other products does not forbid namespace nodes in XPointer ranges, which allows remote attackers to execute arbitrary code or cause a denial of service use-after-free an...

CVE-2016-4738

libxslt in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site...

CVE-2016-4719

The GeoServices component in Apple iOS before 10 and watchOS before 3 does not properly restrict access to PlaceData information, which allows attackers to discover physical locations via a crafted application...

Information disclosure

The GeoServices component in Apple iOS before 10 and watchOS before 3 does not properly restrict access to PlaceData information, which allows attackers to discover physical locations via a crafted application...

CVE-2016-4719

The GeoServices component in Apple iOS before 10 and watchOS before 3 does not properly restrict access to PlaceData information, which allows attackers to discover physical locations via a crafted application...

CVE-2016-4719

The CVE-2016-4719 entry affects Apple’s GeoServices component in iOS (pre-10) and watchOS (pre-3). The issue is a permissions/configuration flaw in PlaceData that allows an app to read sensitive location information. Apple’s security notes enumerate GeoServices/CVE-2016-4719 under watchOS 3 and i...

Apple watchOS information disclosure vulnerability

Apple watchOS is a smartwatch operating system developed by Apple. An information disclosure vulnerability exists in GeoServices in previous versions of Apple watchOS 3. An attacker can exploit this vulnerability to gain unauthorized access to potentially sensitive information...