CVE-2016-7714

CVE-2016-7714 affects Apple platforms (iOS before 10.2, macOS before 10.12.2, watchOS before 3.1.3) via the IOKit IOReportUserClient path. Connected advisory ZDI-16-687 details an OOB read in IOReportUserClient that allows a local attacker to disclose kernel memory-layout information. The root ca...

CVE-2016-7615

CVE-2016-7615 concerns a kernel‑level vulnerability in Apple’s operating systems (iOS prior to 10.2, macOS prior to 10.12.2, watchOS prior to 3.1.3) that can be triggered by a local user. The connected data explicitly describes this as a kernel memory‑management issue (use‑after‑free) with the im...

CVE-2016-4680

CVE-2016-4680 affects Apple kernels across iOS (pre-10.1), tvOS (pre-10.0.1), and watchOS (pre-3.1). The vulnerability exposes kernel memory via a crafted app due to multiple input-validation issues in MIG-generated code, enabling a local attacker to disclose kernel memory. Apple addressed this i...

CVE-2016-4693

CVE-2016-4693 affects Apple platforms (iOS 10.2 and earlier, macOS 10.12.1/10.12.2 and earlier, watchOS 3.1.3 and earlier) where the Security component could allow bypassing cryptographic protections by leveraging the 3DES cipher. The vulnerability is tied to the removal of 3DES as a default ciph...

CVE-2016-7612

CVE-2016-7612 affects macOS Sierra 10.12.1 era (Kernel). The Apple security content entries show the issue as a Kernel memory corruption vulnerability that could allow an attacker to execute arbitrary code with kernel privileges via a crafted app; remediation is provided in macOS 10.12.2 Security...

CVE-2016-7660

An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "syslog" component. It allows local users to gain privileges via unspecified vectors related to Mach port name references...

CVE-2016-7584

CVE-2016-7584 affects Apple platforms (iOS before 10.1, macOS before 10.12.1, tvOS before 10.0.1, watchOS before 3.1) in the AppleMobileFileIntegrity component. Root cause: a validation issue in handling code signatures that allows a signed executable to be substituted if it uses the same team ID...

CVE-2017-2363

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. watchOS before 3.1.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain...

CVE-2016-7589

CVE-2016-7589 is a WebKit issue affecting Apple devices (iOS <10.2, Safari <10.0.2, iCloud <6.1, iTunes <12.5.4, watchOS

CVE-2016-4673

CVE-2016-4673 (Apple CoreGraphics JPEG bug) affects multiple Apple OSes: iOS before 10.1, macOS before 10.12.1, tvOS before 10.0.1, watchOS before 3.1. A memory corruption issue in CoreGraphics may allow arbitrary code execution or memory corruption leading to a crash when processing a crafted JP...

CVE-2016-7657

CVE-2016-7657 is an Apple IOKit memory-corruption vulnerability that could allow a crafted app to read kernel memory on affected systems. Public details in the initial entry reference iOS < 10.2, macOS < 10.12.2, and watchOS

CVE-2017-2360

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. macOS before 10.12.3 is affected. tvOS before 10.1.1 is affected. watchOS before 3.1.3 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or...

CVE-2017-2352

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. watchOS before 3.1.3 is affected. The issue involves the "Unlock with iPhone" component, which allows attackers to bypass the wrist-presence protection mechanism and unlock a Watch device via unspecified vectors...

CVE-2016-7607

CVE-2016-7607 affects Apple OS components (Kernel) on iOS before 10.2, macOS before 10.12.2, and watchOS before 3.1.3, enabling an app to read kernel memory and obtain sensitive information. The bundled data confirms this is a kernel memory access issue described in the CVE summary and is listed ...

CVE-2016-7588

An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "CoreMedia Playback" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory...

CVE-2016-7644

An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service...

CVE-2016-4664

An issue was discovered in certain Apple products. iOS before 10.1 is affected. tvOS before 10.0.1 is affected. watchOS before 3.1 is affected. The issue involves the "Sandbox Profiles" component, which allows attackers to read photo-directory metadata via a crafted app...

CVE-2016-4680

An issue was discovered in certain Apple products. iOS before 10.1 is affected. tvOS before 10.0.1 is affected. watchOS before 3.1 is affected. The issue involves the "Kernel" component. It allows attackers to obtain sensitive information from kernel memory via a crafted app...

CVE-2016-7594

CVE-2016-7594 affects Apple’s ICU component and was disclosed across multiple Apple platforms. The issue is described as memory corruption in ICU that could allow a remote attacker to execute arbitrary code or cause a denial of service via a crafted web site. Affected products include iOS before ...

CVE-2017-2360

CVE-2017-2360 affects Apple devices with Kernel routing as described: iOS before 10.2.1, macOS before 10.12.3, tvOS before 10.1.1, and watchOS before 3.1.3. The issue allows a crafted app to execute arbitrary code in kernel mode or cause a denial of service via use-after-free. Apple advisories sh...