525 matches found
Apple iOS/tvOS/macOS Information Disclosure Vulnerability
Apple iOS is a set of operating systems developed for mobile devices; tvOS is a smart TV operating system; and watchOS is a smart watch operating system. A security vulnerability in CFNetwork Proxies in several Apple products allows remote attackers to exploit the vulnerability to gain access to...
macOS 10.12.x < 10.12.1 Multiple Vulnerabilities
The remote host is running a version of Mac OS X that is 10.12.x prior to macOS 10.12.1. It is, therefore, affected by multiple vulnerabilities in the following components : - ATS - AppleMobileFileIntegrity - AppleSMC - CFNetwork Proxies - CoreGraphics - FaceTime - FontParser - IDS - Connectivity...
About the security content of tvOS 10.0.1
About the security content of tvOS 10.0.1 This document describes the security content of tvOS 10.0.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...
Apple iOS < 10.0 Multiple Vulnerabilities
Binary data 9619.prm...
Apple TV < 10 Multiple Vulnerabilities
According to its banner, the version of Apple TV on the remote device is prior to 10. It is, therefore, affected by multiple vulnerabilities in the following components : - Audio - CFNetwork - CoreCrypto - FontParser - IOAcceleratorFamily - Kernel - libxml2 - libxslt - Security - WebKit Note that...
Apple iOS and Apple OS X CFNetwork Information Disclosure Vulnerability
Apple iOS and Apple OS X are operating systems from Apple, Inc. developed for mobile devices and Apple OS X for Mac computers.CFNetwork is a low-level, high-performance framework that extends BSD sockets. An information disclosure vulnerability exists in CFNetwork in Apple iOS versions prior to 1...
CVE-2016-4708
CFNetwork in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 misparses the Set-Cookie header, which allows remote attackers to obtain sensitive information via a crafted HTTP response...
CVE-2016-4707
CFNetwork in Apple iOS before 10 and OS X before 10.12 mishandles Local Storage deletion, which allows local users to discover the visited web sites of arbitrary users via unspecified vectors...
Information disclosure
CFNetwork in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 misparses the Set-Cookie header, which allows remote attackers to obtain sensitive information via a crafted HTTP response...
CVE-2016-4707
CFNetwork in Apple iOS before 10 and OS X before 10.12 mishandles Local Storage deletion, which allows local users to discover the visited web sites of arbitrary users via unspecified vectors...
CVE-2016-4708
CFNetwork in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 misparses the Set-Cookie header, which allows remote attackers to obtain sensitive information via a crafted HTTP response...
CVE-2016-4708
CVE-2016-4708 affects CFNetwork across Apple platforms (iOS before 10, OS X before 10.12, tvOS before 10, watchOS before 3). Root cause: input parsing/validation flaw in the Set-Cookie header handling that can disclose sensitive information via a crafted HTTP response. Impact: information disclos...
CVE-2016-4707
CVE-2016-4707 affects CFNetwork in Apple iOS <10 and macOS
CVE-2016-4708: Exposure of Sensitive Information to an Unauthorized Actor
CFNetwork in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 misparses the Set-Cookie header, which allows remote attackers to obtain sensitive information via a crafted HTTP response...
CVE-2016-4707: Exposure of Sensitive Information to an Unauthorized Actor
CFNetwork in Apple iOS before 10 and OS X before 10.12 mishandles Local Storage deletion, which allows local users to discover the visited web sites of arbitrary users via unspecified vectors...
CVE-2016-4707
CFNetwork in Apple iOS before 10 and OS X before 10.12 mishandles Local Storage deletion, which allows local users to discover the visited web sites of arbitrary users via unspecified vectors...
macOS < 10.12 Multiple Vulnerabilities
The remote host is running a version of Mac OS X that is prior to 10.10.5, 10.11.x prior to 10.11.6, or is not macOS 10.12. It is, therefore, affected by multiple vulnerabilities in the following components : - apache - apachemodphp - Apple HSSPI Support - AppleEFIRuntime - AppleMobileFileIntegri...
The vulnerability of the Mac OS X operating system, which allows a perpetrator to obtain confidential information
The vulnerability of the CFNetwork component in the Mac OS X operating system is related to the use of weak permissions for cookie files in web browsers. Exploiting this vulnerability could allow an intruder, operating locally, to obtain confidential information using indefinite vectors...
About the security content of tvOS 10
About the security content of tvOS 10 This document describes the security content of tvOS 10. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent...
Apple OS X CFNetwork Information Disclosure Vulnerability
Apple OS X is a specialized operating system developed for Mac computers. Apple OS X's CFNetwork uses weak privileges on web-browser cookies. A local attacker could exploit this vulnerability to obtain sensitive information...