CVE-2016-7597

This CVE (CVE-2016-7597) affects Apple iOS 10.2 and earlier, specifically the SpringBoard component. The issue is a state-management cleanup flaw in Handoff with Siri that can allow a physically proximate user to keep the device unlocked. The Apple security content for iOS 10.2 documents the reme...

CVE-2016-7597

An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves the "SpringBoard" component, which allows physically proximate attackers to maintain the unlocked state via vectors related to Handoff with Siri...

CVE-2016-4740

Apple iOS before 10, when Handoff for Messages is used, does not ensure that a Messages signin has occurred before displaying messages, which might allow attackers to obtain sensitive information via unspecified vectors...

CVE-2016-4740

Apple iOS before 10, when Handoff for Messages is used, does not ensure that a Messages signin has occurred before displaying messages, which might allow attackers to obtain sensitive information via unspecified vectors...

Design/Logic Flaw

Apple iOS before 10, when Handoff for Messages is used, does not ensure that a Messages signin has occurred before displaying messages, which might allow attackers to obtain sensitive information via unspecified vectors...

CVE-2016-4740

CVE-2016-4740 affects Apple iOS prior to 10 where Handoff for Messages may display messages without confirming a Messages signin, allowing potential exposure of sensitive information. The issue is tied to Messages state management and could let a device show messages before authentication. Apple’...

CVE-2016-4740

Apple iOS before 10, when Handoff for Messages is used, does not ensure that a Messages signin has occurred before displaying messages, which might allow attackers to obtain sensitive information via unspecified vectors...

Apple iOS < 10 Multiple Vulnerabilities (BlueBorne)

Binary data appleios100check.nbin...

iOS 10 Security Updates Move to HTTPS

Update Apple has finally moved its iOS security update mechanism to HTTPS with today’s release of iOS 10. Previously, updates were sent to devices over HTTP and attackers already present on a network could interfere with updates. “An issue existed in iOS updates, which did not properly secure use...