About the security content of tvOS 12.3 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

About the security content of watchOS 5.2.1 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

About the security content of iOS 12.3 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

Apple iOS < 8.4.1 Multiple Vulnerabilities

Binary data 8978.prm...

The vulnerability of the iOS operating system, which allows a hacker to circumvent access restrictions to file system objects

The vulnerability of the AppleFileConduit component in the iOS operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass access restrictions to file system objects by manipulating symbolic links...

APPLE-SA-2015-08-13-3 iOS 8.4.1

APPLE-SA-2015-08-13-3 iOS 8.4.1 iOS 8.4.1 is now available and addresses the following: AppleFileConduit Available for: iPhone 4s and later, iPod touch 5th generation and later, iPad 2 and later Impact: A maliciously crafted afc command may allow access to protected parts of the filesystem...

Command injection

AppleFileConduit in Apple iOS before 8.4.1 allows attackers to bypass intended restrictions on filesystem access via an afc command that leverages symlink mishandling...

CVE-2015-5746

AppleFileConduit in Apple iOS before 8.4.1 allows attackers to bypass intended restrictions on filesystem access via an afc command that leverages symlink mishandling...

CVE-2015-5746: Improper Access Control

AppleFileConduit in Apple iOS before 8.4.1 allows attackers to bypass intended restrictions on filesystem access via an afc command that leverages symlink mishandling...

Apple iOS < 8.4.1 Multiple Vulnerabilities

Binary data appleios841check.nbin...

PT-2015-1904

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.4.1 Description The issue is related to insufficient access control in the AppleFileConduit component, allowing attackers to bypass intended restrictions on filesystem access. This can be achieved by leveraging...

CVE-2014-4480

Directory traversal vulnerability in afc in AppleFileConduit in Apple iOS before 8.1.3 and Apple TV before 7.0.3 allows attackers to access unintended filesystem locations by creating a symlink...

Directory traversal

Directory traversal vulnerability in afc in AppleFileConduit in Apple iOS before 8.1.3 and Apple TV before 7.0.3 allows attackers to access unintended filesystem locations by creating a symlink...

CVE-2014-4480

Directory traversal vulnerability in afc in AppleFileConduit in Apple iOS before 8.1.3 and Apple TV before 7.0.3 allows attackers to access unintended filesystem locations by creating a symlink...

PT-2015-3745

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.1.3 Apple TV versions prior to 7.0.3 Description A directory traversal issue exists in the afc component of AppleFileConduit, allowing attackers to access unintended filesystem locations by creating a symlink...

CVE-2014-4480: Improper Link Resolution Before File Access

Directory traversal vulnerability in afc in AppleFileConduit in Apple iOS before 8.1.3 and Apple TV before 7.0.3 allows attackers to access unintended filesystem locations by creating a symlink...