CVE-2016-4608

CVE-2016-4608 affects libxslt across Apple iOS (before 9.3.3), OS X (before 10.11.6), iTunes (before 12.4.2 on Windows), iCloud (before 5.2.1 on Windows), tvOS (before 9.2.2) and watchOS (before 2.2.2). The vulnerability permits remote memory corruption leading to denial of service and possibly o...

CVE-2016-1863

CVE-2016-1863 is a local kernel memory corruption vulnerability affecting Apple OS components. It is listed under Kernel for multiple Apple platforms (iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, watchOS before 2.2.2). Exploitation was demonstrated (exploitable locally per exploit-db...

CVE-2016-4614

CVE-2016-4614 affects libxml2 used by Apple platforms (iOS before 9.3.3, OS X before 10.11.6, iTunes/iCloud on Windows, tvOS, watchOS). The base description notes memory corruption with remote triggering via unknown vectors, and potential unspecified impact. Connected documents corroborate libxml...

CVE-2016-4594

CVE-2016-4594 corresponds to an unauthorized access issue in Apple’s Sandbox Profiles component. The vulnerability enables a local attacker to access the process list via a crafted app making privileged API calls. Affected platforms include iOS prior to 9.3.3, OS X prior to 10.11.6, tvOS prior to...

CVE-2016-4627

CVE-2016-4627 affects IOAcceleratorFamily in Apple iOS prior to 9.3.3, tvOS prior to 9.2.2, and watchOS prior to 2.2.2. Local users could gain kernel privileges or cause a denial of service via a NULL pointer dereference. Apple’s security notes indicate this was addressed by improved validation i...

CVE-2016-4582

CVE-2016-4582 affects Apple kernel components across iOS ≤9.3.3, OS X ≤10.11.6, tvOS ≤9.2.2, and watchOS ≤2.2.2. Description: local memory corruption may let a user escalate privileges or cause a denial of service; vectors are unspecified and separate from CVE-2016-1863 and CVE-2016-4653. In Appl...

CVE-2016-4631

CVE-2016-4631 affects Apple ImageIO's TIFF handling across iOS before 9.3.3, macOS before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2. The issue is a memory corruption/heap overflow in TIFF tile processing inside ImageIO, caused by reading tiles into a buffer sized for a minimal tile (ti...

CVE-2016-1865

CVE-2016-1865 affects Apple kernel: iOS <9.3.3, OS X <10.11.6, tvOS <9.2.2, watchOS

CVE-2016-4626

IOHIDFamily in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows local users to gain privileges or cause a denial of service NULL pointer dereference via unspecified vectors...

CVE-2016-1865

The kernel in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows local users to cause a denial of service NULL pointer dereference via unspecified vectors...

CVE-2016-4610

CVE-2016-4610 affects libxslt in multiple Apple platforms: iOS (pre-9.3.3), OS X (pre-10.11.6), iTunes (pre-12.4.2 on Windows), iCloud (pre-5.2.1 on Windows), tvOS (pre-9.2.2), and watchOS (pre-2.2.2). The vulnerability allows remote attackers to cause a denial of service through memory corruptio...

CVE-2016-4615

CVE-2016-4615 is a libxml2 memory corruption vulnerability referenced in Apple security updates for iOS 9.3.3, OS X 10.11.6, iTunes Windows 12.4.2, iCloud Windows 5.2.1, tvOS 9.2.2, and watchOS 2.2.2. Descriptions indicate a remote attacker could trigger memory corruption with potential denial of...

CVE-2016-4627

IOAcceleratorFamily in Apple iOS before 9.3.3, tvOS before 9.2.2, and watchOS before 2.2.2 allows local users to gain privileges or cause a denial of service NULL pointer dereference via unspecified vectors...

CVE-2016-4632

ImageIO in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denial of service memory consumption via unspecified vectors...

CVE-2016-4609

libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via unknown vectors...

CVE-2016-4653

CVE-2016-4653 affects Apple’s kernel across iOS (before 9.3.3), OS X (before 10.11.6), tvOS (before 9.2.2), and watchOS (before 2.2.2). Root cause: memory corruption via unspecified vectors; results include local privilege escalation or potential denial of service. Remediation: apply the correspo...

CVE-2016-4637

CVE-2016-4637 affects Apple platforms (iOS prior to 9.3.3, OS X prior to 10.11.6, tvOS prior to 9.2.2, watchOS prior to 2.2.2). The issue arises in CoreGraphics BMP image decoding, where a crafted BMP can trigger memory corruption, enabling remote code execution or a denial of service. Publicly d...

CVE-2016-4607

libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via unknown vectors...

CVE-2016-4609

CVE-2016-4609 affects libxslt across Apple platforms: iOS prior to 9.3.3, OS X prior to 10.11.6, iTunes prior to 12.4.2 on Windows, iCloud prior to 5.2.1 on Windows, tvOS prior to 9.2.2, and watchOS prior to 2.2.2. The vulnerability allows remote attackers to cause a denial of service via memory ...

CVE-2016-4628

IOAcceleratorFamily in Apple iOS before 9.3.3 and watchOS before 2.2.2 allows local users to obtain sensitive information from kernel memory or cause a denial of service out-of-bounds read via unspecified vectors...