CVE-2016-4658

xpointer.c in libxml2 before 2.9.5 as used in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3, and other products does not forbid namespace nodes in XPointer ranges, which allows remote attackers to execute arbitrary code or cause a denial of service use-after-free an...

Buffer overflow

Buffer overflow in FontParser in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows remote attackers to obtain sensitive information from process memory via a crafted font file...

Code injection

Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 mishandle signed disk images, which allows attackers to execute arbitrary code in a privileged context via a crafted app...

Information disclosure

CFNetwork in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 misparses the Set-Cookie header, which allows remote attackers to obtain sensitive information via a crafted HTTP response...

Memory corruption

IOAcceleratorFamily in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows remote attackers to obtain sensitive information from process memory or cause a denial of service memory corruption via a crafted web site...

Memory corruption

IOAcceleratorFamily in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

Memory corruption

WebKit in Apple iOS before 10, Safari before 10, tvOS before 10, and watchOS before 3 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site...

Memory corruption

Audio in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...

Out-of-bounds

CoreCrypto in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows attackers to execute arbitrary code or cause a denial of service out-of-bounds write via a crafted app...

Memory corruption

libxslt in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site...

CVE-2016-4737

WebKit in Apple iOS before 10, Safari before 10, tvOS before 10, and watchOS before 3 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site...

CVE-2016-4776

The kernel in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows attackers to obtain sensitive memory-layout information or cause a denial of service out-of-bounds read via a crafted app, a different vulnerability than CVE-2016-4773 and CVE-2016-4774...

CVE-2016-4737

WebKit in Apple iOS before 10, Safari before 10, tvOS before 10, and watchOS before 3 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site...

CVE-2016-4753

CVE-2016-4753 affects Apple platforms (iOS 10, macOS 10.12, tvOS 10, watchOS 3) via a validation issue in signed disk images that allowed arbitrary code execution in a privileged context when processing a crafted app. Patches/releases addressing this were provided in Apple's security content (HT2...

CVE-2016-4738

CVE-2016-4738 is a memory corruption vulnerability in libxslt. The issue occurs in the XSLT processing runtime library (libxslt) and could allow a remote attacker to execute arbitrary code or cause a denial of service when a crafted web page is processed. Debian’s security advisory DSA-3709-1 con...

CVE-2016-4702

CVE-2016-4702 affects Apple Audio in iOS <10, macOS (OS X) <10.12, tvOS <10, and watchOS

CVE-2016-4777

The kernel in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows attackers to execute arbitrary code in a privileged context or cause a denial of service invalid pointer dereference via a crafted app...

CVE-2016-4773

The kernel in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows attackers to obtain sensitive memory-layout information or cause a denial of service out-of-bounds read via a crafted app, a different vulnerability than CVE-2016-4774 and CVE-2016-4776...

CVE-2016-4773

CVE-2016-4773: Kernel memory layout disclosure and potential DoS in Apple platforms. Concrete details show that the issue resides in the kernel across iOS <10, macOS <10.12, tvOS <10, and watchOS

CVE-2016-4712

CVE-2016-4712 affects CoreCrypto across Apple platforms (iOS before 10, macOS before 10.12, tvOS before 10, watchOS before 3). The vulnerability is an out-of-bounds write in CoreCrypto that could allow an attacker to execute arbitrary code or cause a denial of service via a crafted application. R...