CVE-2016-1818

CVE-2016-1818 affects IOAcceleratorFamily on Apple TV (4th generation) running tvOS 9.2.x up to 9.2.0; root cause is a memory corruption issue that could allow an attacker to execute arbitrary code with kernel privileges. The Apple tvOS 9.2.1 security content (HT206564) notes this CVE and indicat...

CVE-2016-1841

CVE-2016-1841 affects libxslt as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. Connected advisories/plug...

CVE-2016-1803

CVE-2016-1803 affects Apple’s CoreCapture component across iOS, OS X, tvOS, and watchOS. The vulnerability is a NULL pointer dereference that could allow a crafted app to execute arbitrary code with kernel or privileged context, or cause a denial of service. Mitigation details from Apple security...

CVE-2016-1828

CVE-2016-1827: Kernel heap overflow in flow_divert_handle_app_map_create on OS X and iOS. Root-privilege exploitation possible; memory corruption may lead to kernel compromise. Patched in OS X 10.11.5 and iOS 9.3.2; exploit code/public PoC exists (flow_divert-heap-overflow) describing OS X Yosemi...

CVE-2016-1830

CVE-2016-1830 is listed in Apple security content as a Kernel memory corruption issue affecting OS X El Capitan and tvOS (and related iOS watchOS entries) with the TV 4th generation reference, indicating a kernel-level vulnerability that could allow arbitrary code execution in a privileged contex...

CVE-2016-1817

CVE-2016-1817 affects the IOAcceleratorFamily in Apple operating systems. The vulnerability enables memory corruption and potentially arbitrary code execution in a privileged context, or a denial of service, via a crafted app. Affected platforms and versions include: iOS prior to 9.3.2, OS X prio...

CVE-2016-1823

CVE-2016-1823 affects Apple iOS 9.3.2 and OS X 10.11.5 (as well as tvOS 9.2.1 and watchOS 2.2.1) via IOHIDDevice::handleReportWithTime. A crafted IOHIDReportType enum can trigger an incorrect cast, causing out-of-bounds read and memory corruption, enabling an attacker to execute arbitrary code in...

CVE-2016-1834

Heap-based buffer overflow in the xmlStrncat function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted XML...

CVE-2016-1839

The xmlDictAddString function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted XML document...

CVE-2016-1840

Heap-based buffer overflow in the xmlFAParsePosCharGroup function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a...

CVE-2016-1834

Heap-based buffer overflow in the xmlStrncat function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted XML...

CVE-2016-1841

libxslt, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site...

CVE-2016-1839

The xmlDictAddString function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted XML document...

CVE-2016-1833

The htmlCurrentChar function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted XML document...

PT-2016-2031

Name of the Vulnerable Software and Affected Versions libxml2 versions prior to 2.9.4 Apple iOS versions prior to 9.3.2 OS X versions prior to 10.11.5 tvOS versions prior to 9.2.1 watchOS versions prior to 2.2.1 Description The issue is caused by a heap-based buffer overflow in the xmlStrncat...

Apple Patches DROWN, Lockscreen Bypass Vulnerability, With Latest Round of Updates

Apple on Monday rolled out a series of patches for nearly all of its operating systems, OS X, iOS, its smart watch operating system, watchOS, and Apple TV’s tvOS, along with fixes for both iTunes and Safari. OS X received the lion’s share of the updates, 67 in total, bringing Apple’s operating...

About the security content of watchOS 2.2.1

About the security content of watchOS 2.2.1 This document describes the security content of watchOS 2.2.1. For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are available...

Apple Releases Multiple Security Updates

Apple has released security updates for tvOS, iOS, watchOS, OS X El Capitan, Safari, and iTunes. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system. Available updates include: tvOS 9.2.1 for Apple TV 4th generation iOS 9.3.2 for iPhone ...

Apple WatchOS Denial of Service Vulnerability (CNVD-2016-02948)

Apple watchOS is a smartwatch operating system developed by Apple. A denial of service vulnerability exists in Apple watchOS versions 2.0 and 2.1. The failure to encrypt the alarm function input allows an attacker to save text by entering a malicious loop...

Apple watchOS denial of service vulnerability (CNVD-2016-02691)

Apple watchOS is a smartwatch operating system developed by Apple. A denial of service vulnerability exists in Apple watchOS that allows local users to gain privileges or cause a denial of service via unspecified vectors...