Design/Logic Flaw

An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted...

CVE-2017-13869

An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted...

CVE-2017-13862

CVE-2017-13862 is a kernel memory corruption flaw affecting Apple devices running iOS before 11.2, macOS before 10.13.2, tvOS before 11.2, and watchOS before 4.2. The issue allows an app crafted to run locally to execute arbitrary code in kernel context or cause memory corruption (privileged code...

CVE-2017-13868

CVE-2017-13868 affects Apple’s kernels across iOS, macOS, tvOS, and watchOS: memory-read restrictions bypassed by a crafted app via the Kernel component. Reported in iOS < 11.2, macOS < 10.13.2, tvOS < 11.2, and watchOS

CVE-2017-13861

CVE-2017-13861 is an IOSurface/IOKit related bug affecting iOS <11.2, tvOS <11.2, watchOS

CVE-2017-13865

CVE-2017-13865 is a kernel‑level memory read restriction bypass affecting Apple platforms (iOS before 11.2, macOS 10.13.x, watchOS/tvOS variants). The Initial Description states a crafted app can bypass kernel memory read protections. Connected documents provide concrete exploitation details: iOS...

CVE-2017-13876

CVE-2017-13876 affects Apple devices (iOS < 11.2, macOS < 10.13.2, tvOS < 11.2, watchOS

CVE-2017-7162

CVE-2017-7162 is an IOKit memory-corruption vulnerability affecting Apple devices (iOS before 11.2, macOS before 10.13.2, tvOS before 11.2, watchOS before 4.2) that could allow a crafted app to execute arbitrary code with kernel/privileged privileges or cause a denial of service. The Apple securi...

CVE-2017-13865

An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted...

CVE-2017-13855

CVE-2017-13855 concerns a kernel-type confusion vulnerability affecting Apple platforms: iOS <11.2, macOS <10.13.2, tvOS <11.2, watchOS

CVE-2017-13867

An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause...

CVE-2017-13862

An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause...

CVE-2017-13861

An issue was discovered in certain Apple products. iOS before 11.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "IOSurface" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory...

CVE-2017-13867

CVE-2017-13867 is linked to memory corruption in the Apple Kernel across iOS <11.2, macOS <10.13.2, tvOS <11.2, and watchOS

CVE-2017-13868

An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted...

CVE-2017-13869

Affected software/hardware: Apple devices running iOS < 11.2, macOS < 10.13.2, tvOS < 11.2, watchOS

Apple watchOS IOSurface Component Memory Corruption Vulnerability

watchOS is the mobile operating system for the Apple Watch developed by Apple. It is based on the iOS operating system and has many similar features. A memory corruption vulnerability exists in the IOSurface component of Apple watchOS. An attacker can exploit the vulnerability to execute arbitrar...

Kernel Security Bypass Vulnerability in Multiple Apple Products (CNVD-2018-00178)

Apple iOS, macOS High Sierra, tvOS, and watchOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices. macOS High Sierra is a specialized operating system developed for Mac computers. tvOS is a smart TV operating system. watchOS is a smart watch operating system...

Apple Releases Security Updates

Apple has released security updates to address vulnerabilities in multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. US-CERT encourages users and administrators to review Apple security pages for the following products and apply...

About the security content of watchOS 4.2

About the security content of watchOS 4.2 This document describes the security content of watchOS 4.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...