5758 matches found
Memory corruption
An issue was discovered in certain Apple products. iOS before 10 is affected. Safari before 10 is affected. iTunes before 12.5.1 is affected. tvOS before 10 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service...
Memory corruption
An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. watchOS before 3.1.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute...
Design/Logic Flaw
An issue was discovered in certain Apple products. iOS before 10.1 is affected. The issue involves the "iTunes Backup" component, which improperly hashes passwords, making it easier to decrypt files...
CVE-2016-4685
An issue was discovered in certain Apple products. iOS before 10.1 is affected. The issue involves the "iTunes Backup" component, which improperly hashes passwords, making it easier to decrypt files...
CVE-2016-4613
An issue was discovered in certain Apple products. Safari before 10.0.1 is affected. iCloud before 6.0.1 is affected. iTunes before 12.5.2 is affected. tvOS before 10.0.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to obtain sensitive information via a craft...
Memory corruption
An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of...
Memory corruption
An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of...
Memory corruption
An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of...
Code injection
An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to obtain sensitive information from process...
CVE-2016-7610
An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of...
CVE-2016-7640
An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of...
CVE-2017-2366
CVE-2017-2366 affects WebKit in Apple products (iOS <10.2.1, Safari <10.0.3, iCloud <6.1.1, iTunes
CVE-2016-7639
CVE-2016-7639 is a WebKit/WebKitGTK+ memory-corruption type vulnerability that could allow remote code execution or DoS when visiting a crafted website. Public advisories tie this CVE to Apple products (iOS Safari, iCloud, iTunes, Safari) and to WebKit components, with reported impacts including ...
CVE-2016-7652
CVE-2016-7652 is a WebKit vulnerability reported for Apple products that could allow remote code execution or memory corruption via a crafted web site. Affected software includes iOS (pre-10.2) and Safari (pre-10.0.2), and related components (WebKit). The CVE is listed among WebKit fixes in SUSE/...
CVE-2016-7642
CVE-2016-7642 affects WebKit in Apple products (notably iOS before 10.2 and Safari before 10.0.2). The issue allows remote code execution or memory corruption/host denial of service via a crafted web site, caused by memory handling issues in WebKit when processing web content. The vulnerability i...
CVE-2016-7599
CVE-2016-7599 affects WebKit in Apple products (iOS before 10.2, Safari before 10.0.2, iCloud before 6.1, iTunes before 12.5.4). Root cause: bypass of Same Origin Policy via crafted web content using HTTP redirects, enabling potential access to sensitive information. Implications align with a cro...
CVE-2016-7640
CVE-2016-7640 affects Apple WebKit-based components across iOS (pre-10.2), Safari (pre-10.0.2), iCloud (pre-6.1), and iTunes (pre-12.5.4). The issue is described as memory-corruption in WebKit that can be triggered by processing crafted web content, enabling remote arbitrary code execution or cau...
CVE-2016-7599
An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain...
CVE-2016-4685
CVE-2016-4685 affects iOS versions before 10.1, in the iTunes Backup component where a weak password hashing method was used for encrypted backups, enabling easier recovery of the backup password and thus decryption of files. Apple’s security content for iOS 10.1 states the weak hash was removed,...