CVE-2016-1748

IOHIDFamily in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows attackers to obtain sensitive kernel memory-layout information via a crafted app...

Design/Logic Flaw

Use-after-free vulnerability in the kernel in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows attackers to execute arbitrary code in a privileged context via a crafted app...

Integer overflow

Multiple integer overflows in the kernel in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allow attackers to execute arbitrary code in a privileged context via a crafted app...

Memory corruption

FontParser in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted PDF document...

Memory corruption

IOHIDFamily in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows attackers to obtain sensitive kernel memory-layout information via a crafted app...

Memory corruption

TrueTypeScaler in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font file...

Code injection

The kernel in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows attackers to cause a denial of service via a crafted app...

Design/Logic Flaw

Messages in Apple iOS before 9.3, OS X before 10.11.4, and watchOS before 2.2 does not properly implement a cryptographic protection mechanism, which allows remote attackers to read message attachments via vectors related to duplicate messages...

Memory corruption

libxml2 in Apple iOS before 9.3, OS X before 10.11.4, and watchOS before 2.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted XML document...

Memory corruption

The kernel in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app, a different vulnerability than CVE-2016-1754...

CVE-2016-1761

libxml2 in Apple iOS before 9.3, OS X before 10.11.4, and watchOS before 2.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted XML document...

CVE-2016-1750

CVE-2016-1750 involves a use-after-free vulnerability in the kernel that affects Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2. The flaw could let an attacker’s crafted app execute arbitrary code with kernel/priviliged context. Apple documentation attributes t...

CVE-2016-1754

CVE-2016-1754 affects Apple platforms (iOS < 9.3, OS X < 10.11.4, tvOS < 9.2, watchOS

CVE-2016-1750

Use-after-free vulnerability in the kernel in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows attackers to execute arbitrary code in a privileged context via a crafted app...

CVE-2016-1751

CVE-2016-1751 affects Apple kernels on iOS pre-9.3, tvOS pre-9.2 and watchOS pre-2.2. The issue is failure to properly restrict execute permissions, enabling a crafted app to bypass code-signing protection. In practice, this can allow an attacker to gain kernel-level execution by loading a malici...

CVE-2016-1788

CVE-2016-1788 affects Apple Messages across iOS <9.3, OS X <10.11.4, and watchOS

CVE-2016-1775

CVE-2016-1775 corresponds to a TrueTypeScaler memory corruption issue in Apple’s font processing stack. In affected products (iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, watchOS before 2.2), a crafted font file could lead to arbitrary code execution or memory corruption, i.e., a remote ...

CVE-2016-1755

CVE-2016-1755 affects Apple products including iOS prior to 9.3, OS X prior to 10.11.4, tvOS prior to 9.2, and watchOS prior to 2.2. The issue is a kernel memory disclosure caused by an out-of-bounds read in the Kernel, as described by Apple’s security content. The root cause is an out-of-bounds ...

CVE-2016-1740

FontParser in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted PDF document...

CVE-2016-1752

CVE-2016-1752 affects the Kernel in Apple devices. Details from Apple security content show a use-after-free issue in the Kernel that could allow a crafted app to cause a denial of service. Affected products and versions are iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before...