CVE-2016-7657

CVE-2016-7657 is an Apple IOKit memory-corruption vulnerability that could allow a crafted app to read kernel memory on affected systems. Public details in the initial entry reference iOS < 10.2, macOS < 10.12.2, and watchOS

CVE-2016-7663

CVE-2016-7663 affects Apple’s CoreFoundation. In macOS <10.12.2, iOS <10.2, and watchOS

CVE-2016-4664

An issue was discovered in certain Apple products. iOS before 10.1 is affected. tvOS before 10.0.1 is affected. watchOS before 3.1 is affected. The issue involves the "Sandbox Profiles" component, which allows attackers to read photo-directory metadata via a crafted app...

CVE-2016-7589

An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. watchOS before 3.1.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute...

CVE-2016-7591

An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "IOHIDFamily" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service...

CVE-2016-4660

CVE-2016-4660 affects Apple platforms via the FontParser component. Public docs show an out-of-bounds read in a crafted font could disclose data or cause a denial of service, with related entries describing a buffer overflow that could lead to arbitrary code execution. Affected products include i...

CVE-2016-7613

CVE-2016-7613 affects Apple OS X/macOS/iOS family. Apple documents show kernel-level local code execution due to multiple object-lifetime issues in MIG-generated code when spawning new processes. Affected: macOS Sierra 10.12 (and earlier OS X versions), iOS 10.1, watchOS/tvOS/macOS variants; Atta...

CVE-2016-7594

An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "ICU" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...

CVE-2016-7626

CVE-2016-7626 affects Apple platforms (iOS < 10.2, tvOS < 10.1, watchOS

CVE-2016-4660

An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. tvOS before 10.0.1 is affected. watchOS before 3.1 is affected. The issue involves the "FontParser" component. It allows remote attackers to obtain sensitive information or cause a...

CVE-2016-7616

An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "Disk Images" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service...

CVE-2016-7588

CVE-2016-7588 affects Apple CoreMedia Playback across iOS < 10.2, macOS < 10.12.2, and watchOS

CVE-2016-4679

CVE-2016-4679 affects Apple OSes (iOS <10.1, macOS <10.12.1, tvOS <10.0.1, watchOS

CVE-2016-7621

CVE-2016-7621 affects Apple platforms: iOS <10.2, macOS <10.12.2, watchOS

CVE-2016-7659

CVE-2016-7659 affects Apple devices, involving the Audio component. A crafted file could trigger memory corruption and allow remote code execution or cause a memory corruption DoS in affected versions: iOS before 10.2, macOS before 10.12.2, and watchOS before 3.1.3. The issue is addressed in Appl...

CVE-2016-7627

CVE-2016-7627 affects CoreGraphics in Apple OSes: iOS <10.2, macOS <10.12.2, watchOS

CVE-2016-7619

CVE-2016-7619 involves libarchive in Apple OSes. A validation issue in the handling of symlinks could allow a local attacker to overwrite existing files. Affected products include iOS 10.2, macOS 10.12.2, and watchOS 3.1.3. The issue is addressed by Apple security updates for these platforms (iOS...

CVE-2016-7660

CVE-2016-7660 affects Apple devices (iOS before 10.2, macOS before 10.12.2, watchOS before 3.1.3) in the syslog component. Root cause: an issue with Mach port name references allows a local user to gain privileges; exact vectors are not detailed in the provided documents. Impact, as stated: local...

CVE-2016-7591

CVE-2016-7591 (IOHIDFamily) affects Apple platforms (iOS prior to 10.2; macOS prior to 10.12.2; watchOS prior to 3.1.3) and involves a use-after-free in IOHIDFamily that could allow a local attacker to execute arbitrary code with kernel privileges or cause a denial of service via a crafted app. T...

CVE-2016-7644

CVE-2016-7644 is a race condition in XNU's set_dp_control_port() that can cause a Mach port to be over-released, enabling arbitrary code execution in a privileged context or a denial of service via use-after-free on affected Apple platforms. The Initial description covers iOS < 10.2, macOS &lt...