CVE-2016-7616

CVE-2016-7616 affects Apple’s Disk Images component in macOS Sierra 10.12.x. The issue is a memory corruption vulnerability that could allow a crafted app to execute arbitrary code with kernel privileges or cause a memory-corruption-induced DoS. Apple’s security notes group this CVE with Disk Ima...

CVE-2016-7637

CVE-2016-7637 describes a local kernel memory corruption issue in Apple devices (iOS before 10.2, macOS before 10.12.2, watchOS before 3.1.3) that could allow a local user to gain privileges or cause a denial of service. Connected Apple security updates indicate this is addressed as part of the m...

CVE-2016-7588

An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "CoreMedia Playback" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory...

CVE-2016-7589

CVE-2016-7589 is a WebKit issue affecting Apple devices (iOS <10.2, Safari <10.0.2, iCloud <6.1, iTunes <12.5.4, watchOS

CVE-2016-7594

CVE-2016-7594 affects Apple’s ICU component and was disclosed across multiple Apple platforms. The issue is described as memory corruption in ICU that could allow a remote attacker to execute arbitrary code or cause a denial of service via a crafted web site. Affected products include iOS before ...

CVE-2016-7607

CVE-2016-7607 affects Apple OS components (Kernel) on iOS before 10.2, macOS before 10.12.2, and watchOS before 3.1.3, enabling an app to read kernel memory and obtain sensitive information. The bundled data confirms this is a kernel memory access issue described in the CVE summary and is listed ...

CVE-2016-7644

An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service...

CVE-2016-7663

CVE-2016-7663 affects Apple’s CoreFoundation. In macOS <10.12.2, iOS <10.2, and watchOS

CVE-2016-7657

CVE-2016-7657 is an Apple IOKit memory-corruption vulnerability that could allow a crafted app to read kernel memory on affected systems. Public details in the initial entry reference iOS < 10.2, macOS < 10.12.2, and watchOS

CVE-2016-7658

CVE-2016-7658 affects Apple devices (iOS <10.2, macOS <10.12.2, watchOS

CVE-2016-7662

An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "Security" component, which allows remote attackers to spoof certificates via unspecified vectors...

CVE-2016-7651

CVE-2016-7651 affects Apple devices (iOS prior to 10.2 and watchOS prior to 3.1.1) with an issue in the Accounts component that allows local bypass of authorization via mishandling of an app uninstall. The public documentation lists the root cause as improper sanitization during uninstall, enabli...

CVE-2017-2352

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. watchOS before 3.1.3 is affected. The issue involves the "Unlock with iPhone" component, which allows attackers to bypass the wrist-presence protection mechanism and unlock a Watch device via unspecified vectors...

CVE-2017-2360

CVE-2017-2360 affects Apple devices with Kernel routing as described: iOS before 10.2.1, macOS before 10.12.3, tvOS before 10.1.1, and watchOS before 3.1.3. The issue allows a crafted app to execute arbitrary code in kernel mode or cause a denial of service via use-after-free. Apple advisories sh...

CVE-2016-7589

An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. watchOS before 3.1.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute...

CVE-2017-2370

CVE-2017-2370 is a kernel vulnerability affecting iOS (pre-10.2.1), macOS (pre-10.12.3), tvOS (pre-10.1.1) and watchOS (pre-3.1.3). It stems from a linear heap buffer overflow in the kernel, triggered via an attacker-controlled length argument in a copyin-like path within mach_voucher_extract_att...

CVE-2016-4660

CVE-2016-4660 affects Apple platforms via the FontParser component. Public docs show an out-of-bounds read in a crafted font could disclose data or cause a denial of service, with related entries describing a buffer overflow that could lead to arbitrary code execution. Affected products include i...

CVE-2016-4660

An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. tvOS before 10.0.1 is affected. watchOS before 3.1 is affected. The issue involves the "FontParser" component. It allows remote attackers to obtain sensitive information or cause a...

CVE-2016-4679

CVE-2016-4679 affects Apple OSes (iOS <10.1, macOS <10.12.1, tvOS <10.0.1, watchOS

CVE-2016-7644

CVE-2016-7644 is a race condition in XNU's set_dp_control_port() that can cause a Mach port to be over-released, enabling arbitrary code execution in a privileged context or a denial of service via use-after-free on affected Apple platforms. The Initial description covers iOS < 10.2, macOS &lt...