Apple macOS Sierra Intel Graphics Driver Memory Corruption Vulnerability

Apple macOS Sierra is a dedicated operating system developed by Apple for Mac computers.Intel Graphics Driver is one of the drivers for the graphics card. A memory corruption vulnerability exists in the Intel Graphics Driver component of Apple macOS Sierra versions prior to 10.12.6. An attacker c...

Kernel Security Bypass Vulnerability in Multiple Apple Products (CNVD-2017-16876)

Apple iOS, macOS Sierra, tvOS, and watchOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; watchOS is a smartwatch operating system. kernel is a kernel component. The Kernel is one of the kernel components. A security vulnerability exists in the Kernel...

Kernel Memory Corruption Vulnerability in Multiple Apple Products (CNVD-2017-16869)

Apple iOS, macOS Sierra, tvOS, and watchOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; watchOS is a smartwatch operating system. kernel is a kernel component. A memory corruption vulnerability exists in the Kernel component of several Apple products. ...

CVE-2017-7051

An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "Bluetooth" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

CVE-2017-7024

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or...

The vulnerability of the Mac OS X operating system allows a hacker to trigger a service failure or execute arbitrary code in a privileged context.

The vulnerability of the WindowServer component of the Mac OS X operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in privileged context, or trigger a service failure memory...

Mozilla Firefox and Firefox ESR for OS X Spoofing Vulnerability

Mozilla Firefox for OS X is an open source web browser based on the OS X platform from the Mozilla Foundation in the U.S. Firefox ESR for OS X is an extended support version of Firefox based on the OS X platform. A spoofing vulnerability exists in versions of Mozilla Firefox prior to 54 and Firef...

The vulnerability of the Mac OS X operating system allows a hacker to trigger a service failure or execute arbitrary code in a privileged context.

The vulnerability of the Mac OS X operating system’s kernel arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in privileged context, or trigger a service failure memory corruption through a...

The vulnerability of the IOSurface component in Mac OS X and iOS operating systems allows a hacker to execute arbitrary code in a privileged context.

The vulnerability of the IOSurface component in Mac OS X and iOS operating systems is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in privileged context racing condition through a specially created application...

The vulnerability of the DiskArbitration component in the Mac OS X operating system allows a hacker to execute arbitrary code in a privileged context.

The vulnerability of the DiskArbitration component in the Mac OS X operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code in privileged context racing condition through a...

The vulnerability of the Kernel component of the Mac OS X operating system allows a hacker to trigger a service failure or execute arbitrary code in a privileged context.

The vulnerability of the Kernel component of the Mac OS X operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in privileged context, or cause a service failure memory corruptio...

The vulnerability of the iBook component in Mac OS X and iOS operating systems allows a hacker to execute arbitrary code in a privileged context.

The vulnerability of the iBook component in Mac OS X and iOS operating systems is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in a privileged context using a specially created application that utilizes symlinks...

The vulnerability of the Mac OS X operating system and the OS X Server server operating system allows a perpetrator to gain system privileges.

The vulnerability of the Mac OS X operating system and the OS X Server server operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a local attacker to gain system privileges...

Apple iOS and macOS Sierra SQLite Memory Corruption Vulnerability

Apple iOS and macOS Sierra are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices; macOS Sierra is a specialized operating system developed for Mac computers; SQLite is a C-based, open source, embedded relational database management component developed by D...

CVE-2017-6990

An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "HFS" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

CVE-2017-2534

An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "Speech Framework" component. It allows attackers to conduct sandbox-escape attacks via a crafted app...

CVE-2017-2533

An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "DiskArbitration" component. A race condition allows attackers to execute arbitrary code in a privileged context via a crafted app...

CVE-2017-2497

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. The issue involves the "iBooks" component. It allows remote attackers to trigger visits to arbitrary URLs via a crafted book...

CVE-2017-2507

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a...

Apple macOS Sierra IOGraphics Memory Corruption Vulnerability

macOS is a set of operating systems that run on Apple's Macintosh line of computers. A memory corruption vulnerability exists in Apple macOS Sierra IOGraphics. An attacker could exploit this vulnerability to cause a kernel elevation of privilege...