CVE-2017-2483

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Kernel" component. A buffer overflow allows attackers to execute arbitrary code in a privileged...

CVE-2017-2440

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause...

CVE-2017-2490

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause...

CVE-2017-2474

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Kernel" component. An off-by-one error allows attackers to execute arbitrary code in a privileged...

CVE-2017-2458

CVE-2017-2458 (Keyboards) is a buffer overflow in Apple’s Keyboards component affecting iOS before 10.3, macOS before 10.12.4, tvOS before 10.2, and watchOS before 3.2, enabling arbitrary code execution in a privileged context via a crafted app. Public documents identify the issue and note patche...

CVE-2017-2483

CVE-2017-2483 affects Apple kernel on iOS <10.3, macOS <10.12.4, tvOS <10.2 and watchOS

CVE-2017-2456

CVE-2017-2456 is a kernel race condition in Apple’s XNU mach_msg handling that can enable arbitrary code execution in kernel space via a non-atomic vm_map_copy move optimization. The connected Project Zero analysis details how two concurrent threads may trigger a flawed move path during vm_map_co...

CVE-2017-2474

CVE-2017-2474 affects Apple devices (iOS, macOS, tvOS, watchOS) with kernel (XNU) memory corruption via an off-by-one error in the SIOCGIFORDER ioctl. The bug writes one entry beyond the allocated ordered_indices buffer because the loop uses a > comparison instead of >=, causing out-of-boun...

CVE-2017-2471

CVE-2017-2471 is a use-after-free in WebKit affecting Apple WebKit-based components (iOS 10.3, Safari 10.1, watchOS 3.2). It allows remote code execution via a crafted web site. Public evidence includes an exploitation entry (Exploit-DB) and multiple advisories linking WebKitGTK+ variants. Remedi...

CVE-2017-2407

CVE-2017-2407 affects Apple platforms via the FontParser component. The issue allows remote attackers to craft a font file that could cause memory corruption, leading to arbitrary code execution or an application crash (DoS). Affected products include iOS before 10.3, macOS before 10.12.4, tvOS b...

CVE-2017-2490

CVE-2017-2490 is a kernel vulnerability in macOS/iOS/watchOS/tvOS involving the FSEVENTS device. Connected data identifies a double-free race in fsevents locking: two threads may read the same devices_not_to_watch pointer at the (a) point and free it at (d) without proper protection, creating a u...

CVE-2017-2379

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Carbon" component. It allows remote attackers to execute arbitrary code or cause a denial of...

CVE-2017-2451

CVE-2017-2451 affects multiple Apple platforms (iOS < 10.3, macOS < 10.12.4, tvOS < 10.2, watchOS

CVE-2017-2482

CVE-2017-2482 is a kernel heap overflow in the BSD Packet Filter (bpf) BIOCSBLEN handling in Apple’s XNU kernel. The vulnerability allows an unauthenticated user-space process to manipulate the kernel heap by changing the bpf buffer size and reattaching interfaces, enabling potential kernel-level...

CVE-2017-2430

CVE-2017-2430 affects the Audio component in several Apple platforms (iOS before 10.3, macOS before 10.12.4, tvOS before 10.2, watchOS before 3.2). A crafted audio file may allow a remote attacker to execute arbitrary code or cause a memory corruption leading to a denial of service. Apple documen...

CVE-2017-2435

CVE-2017-2435 relates to a CoreText memory corruption issue in Apple OSes. A crafted font file could allow remote attackers to execute arbitrary code or cause a denial of service on affected platforms. The vulnerability affects iOS before 10.3, macOS before 10.12.4, tvOS before 10.2, and watchOS ...

CVE-2017-2487

CVE-2017-2487 affects Apple platforms (iOS before 10.3, macOS before 10.12.4, tvOS before 10.2, watchOS before 3.2) and targets the FontParser component. The issue allows a remote attacker to execute arbitrary code or cause a denial of service via a crafted font file, caused by memory corruption/...

CVE-2017-2450

CVE-2017-2450 affects Apple platforms (iOS <10.3; macOS <10.12.4; tvOS <10.2; watchOS

CVE-2017-2472

CVE-2017-2472 affects Apple OSes (iOS < 10.3, macOS < 10.12.4, tvOS < 10.2, watchOS

CVE-2017-2478

CVE-2017-2478 describes a race condition in Apple’s Kernel across iOS, macOS, tvOS and watchOS that could allow a crafted app to execute code with kernel privileges. The connected Apple security entries indicate the issue affected multiple platforms (iOS <10.3, macOS <10.12.4, tvOS <10.2...