7995 matches found
CVE-2016-7636
CVE-2016-7636 affects Apple platforms (iOS 10.2 and earlier, macOS 10.12.2 and earlier, watchOS 3.1.3 and earlier). Root cause: in the Security component, OCSP responder URL handling can be abused by a man-in-the-middle to cause an application crash (denial of service). Impact is partial availabi...
CVE-2017-2363
An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. watchOS before 3.1.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain...
CVE-2016-7636
An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "Security" component, which allows man-in-the-middle attackers to cause a denial of service application crash via vectors...
CVE-2017-2370
An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. macOS before 10.12.3 is affected. tvOS before 10.1.1 is affected. watchOS before 3.1.3 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or...
CVE-2016-7626
An issue was discovered in certain Apple products. iOS before 10.2 is affected. tvOS before 10.1 is affected. watchOS before 3.1.1 is affected. The issue involves the "Profiles" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...
CVE-2016-7644
An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service...
CVE-2016-4675
CVE-2016-4675 affects Apple platforms via the libxpc component. The issue is a logic flaw that could allow an attacker to execute arbitrary code in a privileged context when a crafted app is involved, on macOS Sierra 10.12.x, iOS 10.x, tvOS 10.x, and watchOS 3.x. Apple addressed this with securit...
CVE-2017-2352
An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. watchOS before 3.1.3 is affected. The issue involves the "Unlock with iPhone" component, which allows attackers to bypass the wrist-presence protection mechanism and unlock a Watch device via unspecified vectors...
CVE-2016-7594
CVE-2016-7594 affects Apple’s ICU component and was disclosed across multiple Apple platforms. The issue is described as memory corruption in ICU that could allow a remote attacker to execute arbitrary code or cause a denial of service via a crafted web site. Affected products include iOS before ...
CVE-2016-4665
CVE-2016-4665 is an Apple vulnerability affecting the Sandbox Profiles component, allowing a crafted app to read audio-recording metadata on affected systems. The issue is listed for iOS prior to 10.1, tvOS prior to 10.0.1, and watchOS prior to 3.1. Affected products include iPhone/iPad/iPod touc...
CVE-2016-7616
CVE-2016-7616 affects Apple’s Disk Images component in macOS Sierra 10.12.x. The issue is a memory corruption vulnerability that could allow a crafted app to execute arbitrary code with kernel privileges or cause a memory-corruption-induced DoS. Apple’s security notes group this CVE with Disk Ima...
CVE-2016-4680
An issue was discovered in certain Apple products. iOS before 10.1 is affected. tvOS before 10.0.1 is affected. watchOS before 3.1 is affected. The issue involves the "Kernel" component. It allows attackers to obtain sensitive information from kernel memory via a crafted app...
CVE-2017-2360
CVE-2017-2360 affects Apple devices with Kernel routing as described: iOS before 10.2.1, macOS before 10.12.3, tvOS before 10.1.1, and watchOS before 3.1.3. The issue allows a crafted app to execute arbitrary code in kernel mode or cause a denial of service via use-after-free. Apple advisories sh...
CVE-2017-2360
An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. macOS before 10.12.3 is affected. tvOS before 10.1.1 is affected. watchOS before 3.1.3 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or...
CVE-2016-7588
An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "CoreMedia Playback" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory...
CVE-2016-7637
CVE-2016-7637 describes a local kernel memory corruption issue in Apple devices (iOS before 10.2, macOS before 10.12.2, watchOS before 3.1.3) that could allow a local user to gain privileges or cause a denial of service. Connected Apple security updates indicate this is addressed as part of the m...
CVE-2016-7658
CVE-2016-7658 affects Apple devices (iOS <10.2, macOS <10.12.2, watchOS
CVE-2016-4673
CVE-2016-4673 (Apple CoreGraphics JPEG bug) affects multiple Apple OSes: iOS before 10.1, macOS before 10.12.1, tvOS before 10.0.1, watchOS before 3.1. A memory corruption issue in CoreGraphics may allow arbitrary code execution or memory corruption leading to a crash when processing a crafted JP...
CVE-2016-7607
CVE-2016-7607 affects Apple OS components (Kernel) on iOS before 10.2, macOS before 10.12.2, and watchOS before 3.1.3, enabling an app to read kernel memory and obtain sensitive information. The bundled data confirms this is a kernel memory access issue described in the CVE summary and is listed ...