CVE-2017-2502

CVE-2017-2502 is an Apple CoreAudio information-disclosure issue that lets a crafted app bypass memory-read restrictions and read restricted memory. It affects iOS before 10.3.2, macOS before 10.12.5, tvOS before 10.2.1, and watchOS before 3.2.2. The root cause is a CoreAudio validation flaw that...

CVE-2017-2540

An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "WindowServer" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

PT-2017-15420

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.12.5 Description An issue was discovered in macOS that involves the Kernel component, allowing attackers to bypass intended memory-read restrictions via a crafted app. Recommendations For macOS versions prior to...

CVE-2017-2516: Undefined Security Weakness

An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

CVE-2017-2509: Undefined Security Weakness

An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

CVE-2017-2502: Undefined Security Weakness

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "CoreAudio" component. It allows attackers to bypass intended memory-read restrictions via a...

CVE-2017-2507: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a...

CVE-2017-2540: Improper Input Validation

An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "WindowServer" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

PT-2017-17444

Name of the Vulnerable Software and Affected Versions iOS versions prior to 10.3.2 macOS versions prior to 10.12.5 tvOS versions prior to 10.2.1 watchOS versions prior to 3.2.2 Description The issue involves the Kernel component and allows attackers to bypass intended memory-read restrictions via...

PT-2017-15426

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.12.5 Description An issue was discovered in macOS that involves the Kernel component, allowing attackers to bypass intended memory-read restrictions via a crafted app. Recommendations For macOS versions prior to...

CVE-2017-6990: Undefined Security Weakness

An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "HFS" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

PT-2017-15439

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.12.5 Description The issue involves the WindowServer component and allows attackers to bypass intended memory-read restrictions via a crafted app. Recommendations For macOS versions prior to 10.12.5, update to versio...