CVE-2016-7578

An issue was discovered in certain Apple products. iOS before 10.1 is affected. Safari before 10.0.1 is affected. iCloud before 6.0.1 is affected. iTunes before 12.5.2 is affected. tvOS before 10.0.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute...

CVE-2016-4692

An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of...

CVE-2016-7639

CVE-2016-7639 is a WebKit/WebKitGTK+ memory-corruption type vulnerability that could allow remote code execution or DoS when visiting a crafted website. Public advisories tie this CVE to Apple products (iOS Safari, iCloud, iTunes, Safari) and to WebKit components, with reported impacts including ...

CVE-2016-7641

An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of...

CVE-2016-7642

CVE-2016-7642 affects WebKit in Apple products (notably iOS before 10.2 and Safari before 10.0.2). The issue allows remote code execution or memory corruption/host denial of service via a crafted web site, caused by memory handling issues in WebKit when processing web content. The vulnerability i...

CVE-2016-7632

An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of...

CVE-2016-7635

An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of...

CVE-2016-7652

CVE-2016-7652 is a WebKit vulnerability reported for Apple products that could allow remote code execution or memory corruption via a crafted web site. Affected software includes iOS (pre-10.2) and Safari (pre-10.0.2), and related components (WebKit). The CVE is listed among WebKit fixes in SUSE/...

CVE-2016-7656

An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of...

CVE-2016-7654

An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of...

CVE-2016-7762

CVE-2016-7762 describes a WebKit-based cross-site scripting vulnerability impacting Apple iOS prior to 10.2, enabling XSS in Safari via malicious WebKit content. The connected Apple security note (iOS 10.2) confirms the issue was addressed in iOS 10.2. The vulnerability affects WebKit components ...

CVE-2016-7762

An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves the "WebKit" component, which allows XSS attacks against Safari...

CVE-2017-2363

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. watchOS before 3.1.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain...

CVE-2017-2364

CVE-2017-2364 affects WebKit components in iOS (before 10.2.1) and Safari (before 10.0.3), allowing a crafted website to bypass Same Origin Policy and potentially exfiltrate sensitive data. The issue is tied to WebKit in Apple products and has been publicly acknowledged with patches in iOS 10.2.1...

CVE-2017-2363

CVE-2017-2363 affects Apple WebKit components across iOS (iOS before 10.2.1), Safari (before 10.0.3), tvOS (before 10.1.1) and watchOS (before 3.1.3). The issue permits a remote attacker to bypass the Same Origin Policy and exfiltrate sensitive data via a crafted web site, due to a WebKit prototy...

CVE-2017-2355

CVE-2017-2355 affects WebKit in Apple ecosystems (iOS before 10.2.1; Safari before 10.0.3; iCloud before 6.1.1; iTunes before 12.5.5; tvOS before 10.1.1). The issue enables remote code execution or a denial of service via crafted web content, due to multiple memory corruption and related reliabil...

CVE-2017-2366

CVE-2017-2366 affects WebKit in Apple products (iOS <10.2.1, Safari <10.0.3, iCloud <6.1.1, iTunes

CVE-2016-7640

CVE-2016-7640 affects Apple WebKit-based components across iOS (pre-10.2), Safari (pre-10.0.2), iCloud (pre-6.1), and iTunes (pre-12.5.4). The issue is described as memory-corruption in WebKit that can be triggered by processing crafted web content, enabling remote arbitrary code execution or cau...

CVE-2016-4613

CVE-2016-4613 affects Apple WebKit components in Safari (<10.0.1), iCloud (<6.0.1), iTunes (<12.5.2), and tvOS (

CVE-2016-7599

CVE-2016-7599 affects WebKit in Apple products (iOS before 10.2, Safari before 10.0.2, iCloud before 6.1, iTunes before 12.5.4). Root cause: bypass of Same Origin Policy via crafted web content using HTTP redirects, enabling potential access to sensitive information. Implications align with a cro...