CVE-2016-7616

An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "Disk Images" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service...

CVE-2016-7643

An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "ImageIO" component. It allows remote attackers to obtain sensitive information from process memory or cause a denial of servi...

CVE-2016-7594

An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "ICU" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...

CVE-2016-7659

CVE-2016-7659 affects Apple devices, involving the Audio component. A crafted file could trigger memory corruption and allow remote code execution or cause a memory corruption DoS in affected versions: iOS before 10.2, macOS before 10.12.2, and watchOS before 3.1.3. The issue is addressed in Appl...

CVE-2016-7621

CVE-2016-7621 affects Apple platforms: iOS <10.2, macOS <10.12.2, watchOS

CVE-2017-2370

CVE-2017-2370 is a kernel vulnerability affecting iOS (pre-10.2.1), macOS (pre-10.12.3), tvOS (pre-10.1.1) and watchOS (pre-3.1.3). It stems from a linear heap buffer overflow in the kernel, triggered via an attacker-controlled length argument in a copyin-like path within mach_voucher_extract_att...

CVE-2016-7626

CVE-2016-7626 affects Apple platforms (iOS < 10.2, tvOS < 10.1, watchOS

CVE-2016-7660

CVE-2016-7660 affects Apple devices (iOS before 10.2, macOS before 10.12.2, watchOS before 3.1.3) in the syslog component. Root cause: an issue with Mach port name references allows a local user to gain privileges; exact vectors are not detailed in the provided documents. Impact, as stated: local...

CVE-2016-4679

CVE-2016-4679 affects Apple OSes (iOS <10.1, macOS <10.12.1, tvOS <10.0.1, watchOS

CVE-2016-7644

CVE-2016-7644 is a race condition in XNU's set_dp_control_port() that can cause a Mach port to be over-released, enabling arbitrary code execution in a privileged context or a denial of service via use-after-free on affected Apple platforms. The Initial description covers iOS < 10.2, macOS &lt...

CVE-2016-7588

CVE-2016-7588 affects Apple CoreMedia Playback across iOS < 10.2, macOS < 10.12.2, and watchOS

CVE-2016-7619

CVE-2016-7619 involves libarchive in Apple OSes. A validation issue in the handling of symlinks could allow a local attacker to overwrite existing files. Affected products include iOS 10.2, macOS 10.12.2, and watchOS 3.1.3. The issue is addressed by Apple security updates for these platforms (iOS...

CVE-2016-7613

CVE-2016-7613 affects Apple OS X/macOS/iOS family. Apple documents show kernel-level local code execution due to multiple object-lifetime issues in MIG-generated code when spawning new processes. Affected: macOS Sierra 10.12 (and earlier OS X versions), iOS 10.1, watchOS/tvOS/macOS variants; Atta...

CVE-2016-4660

CVE-2016-4660 affects Apple platforms via the FontParser component. Public docs show an out-of-bounds read in a crafted font could disclose data or cause a denial of service, with related entries describing a buffer overflow that could lead to arbitrary code execution. Affected products include i...

CVE-2017-2363

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. watchOS before 3.1.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain...

Apple Patches Critical Kernel Vulnerabilities

Apple today released new versions of iOS and macOS Sierra and addressed some overlapping code execution vulnerabilities in both its mobile and desktop operating systems. The updates were part of a bigger release of security updates from Apple that also included Safari, iCloud for Windows, and...

Apple Releases Security Updates

Apple has released security updates to address multiple vulnerabilities in several products. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system. Users and administrators are encouraged to review the Apple security pages for the followin...

About the security content of watchOS 3.1.3

About the security content of watchOS 3.1.3 This document describes the security content of watchOS 3.1.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...

CVE-2016-7589

An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. watchOS before 3.1.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute...

Multiple Apple Products Kernel Component Information Disclosure Vulnerability

Apple iOS, watchOS, macOS, and tvOS are products of Apple Inc. Apple iOS is an operating system for mobile devices; watchOS is a smartwatch operating system. kernel is a kernel component. A security vulnerability exists in the Kernel component of several Apple products. An attacker could exploit...