CVE-2016-4628

The CVE-2016-4628 issue affects IOAcceleratorFamily on Apple devices (iOS before 9.3.3 and watchOS before 2.2.2). Root cause: a null pointer dereference was mitigated by improved validation. Impact: local users could read kernel memory or cause a denial of service via an out-of-bounds read. Remed...

CVE-2016-1863

CVE-2016-1863 is a local kernel memory corruption vulnerability affecting Apple OS components. It is listed under Kernel for multiple Apple platforms (iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, watchOS before 2.2.2). Exploitation was demonstrated (exploitable locally per exploit-db...

CVE-2016-4610

CVE-2016-4610 affects libxslt in multiple Apple platforms: iOS (pre-9.3.3), OS X (pre-10.11.6), iTunes (pre-12.4.2 on Windows), iCloud (pre-5.2.1 on Windows), tvOS (pre-9.2.2), and watchOS (pre-2.2.2). The vulnerability allows remote attackers to cause a denial of service through memory corruptio...

CVE-2016-4609

CVE-2016-4609 affects libxslt across Apple platforms: iOS prior to 9.3.3, OS X prior to 10.11.6, iTunes prior to 12.4.2 on Windows, iCloud prior to 5.2.1 on Windows, tvOS prior to 9.2.2, and watchOS prior to 2.2.2. The vulnerability allows remote attackers to cause a denial of service via memory ...

CVE-2016-4616

CVE-2016-4616 is a libxml2 vulnerability affecting Apple platforms (iOS 9.3.3, OS X 10.11.6, and corresponding Apple apps) where parsing a maliciously crafted XML document could cause memory corruption and may lead to disclosure of user information. The issue is categorized as a memory handling p...

CVE-2016-4627

CVE-2016-4627 affects IOAcceleratorFamily in Apple iOS prior to 9.3.3, tvOS prior to 9.2.2, and watchOS prior to 2.2.2. Local users could gain kernel privileges or cause a denial of service via a NULL pointer dereference. Apple’s security notes indicate this was addressed by improved validation i...

CVE-2016-4628

IOAcceleratorFamily in Apple iOS before 9.3.3 and watchOS before 2.2.2 allows local users to obtain sensitive information from kernel memory or cause a denial of service out-of-bounds read via unspecified vectors...

CVE-2016-4616

libxml2 in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via unknown vectors...

CVE-2016-4632

ImageIO in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denial of service memory consumption via unspecified vectors...

CVE-2016-4607

libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via unknown vectors...

CVE-2016-4632

CVE-2016-4632 affects ImageIO in Apple iOS <9.3.3, OS X <10.11.6, tvOS <9.2.2, and watchOS

CVE-2016-4631

CVE-2016-4631 affects Apple ImageIO's TIFF handling across iOS before 9.3.3, macOS before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2. The issue is a memory corruption/heap overflow in TIFF tile processing inside ImageIO, caused by reading tiles into a buffer sized for a minimal tile (ti...

CVE-2016-4637

CVE-2016-4637 affects Apple platforms (iOS prior to 9.3.3, OS X prior to 10.11.6, tvOS prior to 9.2.2, watchOS prior to 2.2.2). The issue arises in CoreGraphics BMP image decoding, where a crafted BMP can trigger memory corruption, enabling remote code execution or a denial of service. Publicly d...

CVE-2016-4608

libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via unknown vectors...

CVE-2016-4609

libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via unknown vectors...

3 6 0 Nirvana team to assist Apple fixed the kernel vulnerability been publicly acknowledged-bug warning-the black bar safety net

Today, Apple released a new round of security bulletins, fixes by 360Nirvan Team found that the high-risk kernel vulnerability, vulnerability number CVE-2 0 1 6-4 5 8 2, the vulnerability affects OS X 10.11.6, iOS, 9.3.3, and watchOS 2.2.2 and tvOS 9.2.2 before version the multi-platform system,...

CVE-2016-1839

The xmlDictAddString function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted XML document...

CVE-2016-1836

Use-after-free vulnerability in the xmlDictComputeFastKey function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service via a crafted XML document...

CVE-2016-1834

Heap-based buffer overflow in the xmlStrncat function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted XML...

About the security content of watchOS 2.2.2

About the security content of watchOS 2.2.2 This document describes the security content of watchOS 2.2.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...