CVE-2016-7658

CVE-2016-7658 affects Apple devices (iOS <10.2, macOS <10.12.2, watchOS

CVE-2016-7616

CVE-2016-7616 affects Apple’s Disk Images component in macOS Sierra 10.12.x. The issue is a memory corruption vulnerability that could allow a crafted app to execute arbitrary code with kernel privileges or cause a memory-corruption-induced DoS. Apple’s security notes group this CVE with Disk Ima...

CVE-2016-4675

CVE-2016-4675 affects Apple platforms via the libxpc component. The issue is a logic flaw that could allow an attacker to execute arbitrary code in a privileged context when a crafted app is involved, on macOS Sierra 10.12.x, iOS 10.x, tvOS 10.x, and watchOS 3.x. Apple addressed this with securit...

CVE-2016-7651

CVE-2016-7651 affects Apple devices (iOS prior to 10.2 and watchOS prior to 3.1.1) with an issue in the Accounts component that allows local bypass of authorization via mishandling of an app uninstall. The public documentation lists the root cause as improper sanitization during uninstall, enabli...

CVE-2016-7663

CVE-2016-7663 affects Apple’s CoreFoundation. In macOS <10.12.2, iOS <10.2, and watchOS

CVE-2016-7662

An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "Security" component, which allows remote attackers to spoof certificates via unspecified vectors...

CVE-2016-4665

CVE-2016-4665 is an Apple vulnerability affecting the Sandbox Profiles component, allowing a crafted app to read audio-recording metadata on affected systems. The issue is listed for iOS prior to 10.1, tvOS prior to 10.0.1, and watchOS prior to 3.1. Affected products include iPhone/iPad/iPod touc...

CVE-2016-7589

An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. watchOS before 3.1.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute...

CVE-2016-7588

CVE-2016-7588 affects Apple CoreMedia Playback across iOS < 10.2, macOS < 10.12.2, and watchOS

CVE-2016-7619

CVE-2016-7619 involves libarchive in Apple OSes. A validation issue in the handling of symlinks could allow a local attacker to overwrite existing files. Affected products include iOS 10.2, macOS 10.12.2, and watchOS 3.1.3. The issue is addressed by Apple security updates for these platforms (iOS...

CVE-2016-7613

CVE-2016-7613 affects Apple OS X/macOS/iOS family. Apple documents show kernel-level local code execution due to multiple object-lifetime issues in MIG-generated code when spawning new processes. Affected: macOS Sierra 10.12 (and earlier OS X versions), iOS 10.1, watchOS/tvOS/macOS variants; Atta...

CVE-2016-7659

CVE-2016-7659 affects Apple devices, involving the Audio component. A crafted file could trigger memory corruption and allow remote code execution or cause a memory corruption DoS in affected versions: iOS before 10.2, macOS before 10.12.2, and watchOS before 3.1.3. The issue is addressed in Appl...

CVE-2016-7621

CVE-2016-7621 affects Apple platforms: iOS <10.2, macOS <10.12.2, watchOS

CVE-2016-7626

CVE-2016-7626 affects Apple platforms (iOS < 10.2, tvOS < 10.1, watchOS

CVE-2016-7644

CVE-2016-7644 is a race condition in XNU's set_dp_control_port() that can cause a Mach port to be over-released, enabling arbitrary code execution in a privileged context or a denial of service via use-after-free on affected Apple platforms. The Initial description covers iOS < 10.2, macOS &lt...

CVE-2016-4660

An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. tvOS before 10.0.1 is affected. watchOS before 3.1 is affected. The issue involves the "FontParser" component. It allows remote attackers to obtain sensitive information or cause a...

CVE-2016-7621

An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "Kernel" component. It allows local users to execute arbitrary code in a privileged context or cause a denial of service...

CVE-2016-7591

An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "IOHIDFamily" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service...

CVE-2016-7616

An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "Disk Images" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service...

CVE-2016-7643

An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "ImageIO" component. It allows remote attackers to obtain sensitive information from process memory or cause a denial of servi...