Race condition

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "Kernel" component. A race condition allows attackers to execute arbitrary code in a...

Memory corruption

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "Foundation" component. It allows remote attackers to execute arbitrary code or cause a deni...

Design/Logic Flaw

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "CoreAudio" component. It allows attackers to bypass intended memory-read restrictions via a...

Memory corruption

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "SQLite" component. It allows remote attackers to execute arbitrary code or cause a denial o...

Memory corruption

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial o...

Memory corruption

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "AVEVideoEncoder" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of servic...

Memory corruption

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "AVEVideoEncoder" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of servic...

Memory corruption

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "AVEVideoEncoder" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of servic...

CVE-2017-2521

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial o...

CVE-2017-2501

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "Kernel" component. A race condition allows attackers to execute arbitrary code in a...

CVE-2017-6997

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "AVEVideoEncoder" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of servic...

CVE-2017-2524

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "TextInput" component. It allows remote attackers to execute arbitrary code or cause a denia...

CVE-2017-2520

CVE-2017-2520 (SQLite, affected Apple OSes) is a vulnerability where a crafted SQL statement could cause a buffer overflow, enabling remote code execution or a denial of service. Affected products/versions (from provided sources): Apple iOS <10.3.2, macOS <10.12.5, tvOS <10.2.1, watchOS

CVE-2017-2519

CVE-2017-2519 is a SQLite vulnerability where an insufficient size of the reference count on Table objects could lead to denial of service or arbitrary code execution via a crafted SQL statement. Public records in the provided documents show affected products across multiple vendors: Apple (iOS 1...

CVE-2017-6987

CVE-2017-6987 is a kernel memory-read restriction bypass in Apple devices. Affected: iOS versions prior to 10.3.2, macOS prior to 10.12.5, tvOS prior to 10.2.1, and watchOS prior to 3.2.2. Description from sources: the issue lies in the Kernel component allowing a crafted app to bypass memory-rea...

CVE-2017-6989

CVE-2017-6989 affects Apple AVEVideoEncoder in iOS 10.3.2 and earlier, tvOS 10.2.1 and earlier, watchOS 3.2.2 and earlier. The issue is a kernel‑level memory corruption in the AVEVideoEncoder path that can allow a crafted app to execute code with kernel privileges or cause a memory‑corruption rel...

CVE-2017-2507

CVE-2017-2507 affects Apple iOS (<10.3.2), macOS (<10.12.5), tvOS (<10.2.1), and watchOS (

CVE-2017-2520

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "SQLite" component. It allows remote attackers to execute arbitrary code or cause a denial o...

CVE-2017-2520

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "SQLite" component. It allows remote attackers to execute arbitrary code or cause a denial o...

CVE-2017-6998

CVE-2017-6998 affects Apple AVEVideoEncoder in iOS (pre-10.3.2), tvOS (pre-10.2.1), and watchOS (pre-3.2.2). A crafted app could trigger memory corruption in AVEVideoEncoder to execute arbitrary code with kernel privileges or cause a denial of service. The issue is a local attack requiring user i...