CVE-2016-1788

Messages in Apple iOS before 9.3, OS X before 10.11.4, and watchOS before 2.2 does not properly implement a cryptographic protection mechanism, which allows remote attackers to read message attachments via vectors related to duplicate messages...

CVE-2016-1755

The kernel in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app, a different vulnerability than CVE-2016-1754...

CVE-2016-1740

FontParser in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted PDF document...

CVE-2016-1752

The kernel in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows attackers to cause a denial of service via a crafted app...

CVE-2016-1753

Multiple integer overflows in the kernel in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allow attackers to execute arbitrary code in a privileged context via a crafted app...

CVE-2016-1775

TrueTypeScaler in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font file...

CVE-2016-1754

The kernel in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app, a different vulnerability than CVE-2016-1755...

CVE-2016-1753

CVE-2016-1753 affects Apple’s kernel on iOS prior to 9.3, OS X prior to 10.11.4, tvOS prior to 9.2, and watchOS prior to 2.2. It is described by Apple advisories as a kernel-level issue enabling an application to bypass code signing and potentially execute arbitrary code with kernel privileges. P...

CVE-2016-1740

CVE-2016-1740 affects FontParser in Apple platforms (iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, watchOS before 2.2). Description: opening a maliciously crafted PDF can cause a memory corruption and may lead to arbitrary code execution or application termination. Root cause is a memory ...

CVE-2016-1761

libxml2 in Apple iOS before 9.3, OS X before 10.11.4, and watchOS before 2.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted XML document...

CVE-2016-1748

CVE-2016-1748 affects IOHIDFamily and allows an unprivileged app to obtain kernel memory layout information by exploiting a memory‑corruption issue. Apple’s security content confirms this vulnerability across multiple platforms and versions, with mitigations delivered in iOS 9.3, OS X 10.11.4, tv...

Apple Releases Multiple Security Updates

Apple has released security updates for iOS, watchOS, tvOS, Xcode, OS X El Capitan, OS X Server 5.1, and Safari to address multiple vulnerabilities. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system. Available updates include: iOS 9.3...

About the security content of watchOS 2.2

About the security content of watchOS 2.2 This document describes the security content of watchOS 2.2. For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are available. To...

Apple Watch Denial Of Service

Document Title: =============== Apple WatchOS v2.1 - Denial of Service Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1659 Followup ID: 634926833 Release Date: ============= 2016-01-11 Vulnerability Laboratory ID VL-ID:...

Apple watchOS 2 - Crash (PoC)

Exploit for hardware platform in category dos / poc + Title: Apple watchOS - Remote Crash Exploit + Product: Apple + Vendor: www.apple.com + SoftWare Link : www.apple.com/watchos-2/ + Vulnerable Versions: watchOS on IOS 9.0.1 Author : Mohammad Reza Espargham Linkedin :...

Apple watchOS 2 - Crash (PoC)

Apple watchOS 2 - Crash PoC + Title: Apple watchOS - Remote Crash Exploit + Product: Apple + Vendor: www.apple.com + SoftWare Link : www.apple.com/watchos-2/ + Vulnerable Versions: watchOS on IOS 9.0.1 Author : Mohammad Reza Espargham Linkedin : https://ir.linkedin.com/in/rezasp E-Mail :...

Apple watchOS 2 - Crash (PoC)

Title: Apple watchOS - Remote Crash Exploit + Product: Apple + Vendor: www.apple.com + SoftWare Link : www.apple.com/watchos-2/ + Vulnerable Versions: watchOS on IOS 9.0.1 Author : Mohammad Reza Espargham Linkedin : https://ir.linkedin.com/in/rezasp E-Mail : meatrezadotes ,...

Apple WatchOS v2.1 - Denial of Service Vulnerability

Document Title: =============== Apple WatchOS v2.1 - Denial of Service Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1659 Followup ID: 634926833 Release Date: ============= 2016-01-11 Vulnerability Laboratory ID VL-ID:...

Apple WatchOS v2.1 - Denial of Service Vulnerability

Document Title: =============== Apple WatchOS v2.1 - Denial of Service Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1659 Followup ID: 634926833 Release Date: ============= 2016-01-11 Vulnerability Laboratory ID VL-ID:...

CVE-2015-7112

The IOHIDFamily API in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app, a different vulnerability than CVE-2015-7111...