CVE-2016-4776

The kernel in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows attackers to obtain sensitive memory-layout information or cause a denial of service out-of-bounds read via a crafted app, a different vulnerability than CVE-2016-4773 and CVE-2016-4774...

CVE-2016-4773

The kernel in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows attackers to obtain sensitive memory-layout information or cause a denial of service out-of-bounds read via a crafted app, a different vulnerability than CVE-2016-4774 and CVE-2016-4776...

CVE-2016-4737

WebKit in Apple iOS before 10, Safari before 10, tvOS before 10, and watchOS before 3 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site...

CVE-2016-4712

CVE-2016-4712 affects CoreCrypto across Apple platforms (iOS before 10, macOS before 10.12, tvOS before 10, watchOS before 3). The vulnerability is an out-of-bounds write in CoreCrypto that could allow an attacker to execute arbitrary code or cause a denial of service via a crafted application. R...

CVE-2016-4773

CVE-2016-4773: Kernel memory layout disclosure and potential DoS in Apple platforms. Concrete details show that the issue resides in the kernel across iOS <10, macOS <10.12, tvOS <10, and watchOS

CVE-2016-4702

CVE-2016-4702 affects Apple Audio in iOS <10, macOS (OS X) <10.12, tvOS <10, and watchOS

CVE-2016-4777

CVE-2016-4777 affects the Kernel in watchOS 3 (Apple Watch). The root cause is an untrusted pointer dereference that could allow a local attacker to execute arbitrary code with kernel privileges; Apple addressed this by removing the affected code, mitigating the issue in the watchOS 3 kernel.

CVE-2016-4774

CVE-2016-4774 affects Apple’s kernel in iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3. The vulnerability is a kernel memory layout disclosure and out-of-bounds read triggered by a crafted app, enabling attackers to obtain sensitive memory-layout information or cause a den...

CVE-2016-4658

xpointer.c in libxml2 before 2.9.5 as used in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3, and other products does not forbid namespace nodes in XPointer ranges, which allows remote attackers to execute arbitrary code or cause a denial of service use-after-free an...

CVE-2016-4776

CVE-2016-4776 concerns the kernel in Apple platforms prior to updates listed below: iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3. An attacker who can run a crafted app may obtain sensitive memory-layout information or cause a denial of service via an out-of-bounds read i...

CVE-2016-4738

libxslt in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site...

CVE-2016-4718

The CVE-2016-4718 entry concerns a buffer overflow in FontParser that affects multiple Apple platforms when processing malicious font files. Specifically, Apple iOS before 10, macOS (OS X) before 10.12, tvOS before 10, and watchOS before 3 are listed as vulnerable, with the issue allowing a remot...

CVE-2016-4708

CVE-2016-4708 affects CFNetwork across Apple platforms (iOS before 10, OS X before 10.12, tvOS before 10, watchOS before 3). Root cause: input parsing/validation flaw in the Set-Cookie header handling that can disclose sensitive information via a crafted HTTP response. Impact: information disclos...

CVE-2016-4702

Audio in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...

CVE-2016-4778

CVE-2016-4778 affects the Kernel on Apple platforms (iOS before 10, macOS before 10.12, tvOS before 10, watchOS before 3). It enables arbitrary code execution in a privileged context or memory corruption via a crafted app. Apple’s security content pages indicate fixes in iOS 10, macOS Sierra 10.1...

CVE-2016-4772

CVE-2016-4772 is a kernel-stage vulnerability documented in Apple security records, with concrete detail in the Apple Watch security entry. The vulnerability is described as a remote denial-of-service condition caused by a lock handling issue in the kernel. The linked entry notes that the issue w...

CVE-2016-4658

xpointer.c in libxml2 before 2.9.5 as used in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3, and other products does not forbid namespace nodes in XPointer ranges, which allows remote attackers to execute arbitrary code or cause a denial of service use-after-free an...

CVE-2016-4719

The GeoServices component in Apple iOS before 10 and watchOS before 3 does not properly restrict access to PlaceData information, which allows attackers to discover physical locations via a crafted application...

Information disclosure

The GeoServices component in Apple iOS before 10 and watchOS before 3 does not properly restrict access to PlaceData information, which allows attackers to discover physical locations via a crafted application...

CVE-2016-4719

The GeoServices component in Apple iOS before 10 and watchOS before 3 does not properly restrict access to PlaceData information, which allows attackers to discover physical locations via a crafted application...