CVE-2016-7659

An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "Audio" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...

DEBIAN-CVE-2016-7656

An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of...

Memory Corruption Vulnerability in WebKit Component of Multiple Apple Products (CNVD-2016-12800)

Apple Safari, iCloud for Windows, iTunes, iOS, and tvOS are products of Apple Inc. Apple Safari is a web browser that is the default browser shipped with the Mac OS X and iOS operating systems; iTunes is a suite of media player applications. WebKit is an open source web browser engine developed b...

Arbitrary Code Execution Vulnerability in the Kernel Component of Multiple Apple Products (CNVD-2016-12821)

Apple iOS, watchOS, macOS, and tvOS are products of Apple Inc. Apple iOS is an operating system for mobile devices; watchOS is a smartwatch operating system. kernel is a kernel component. A security vulnerability exists in the Kernel component of several Apple products. An attacker can exploit th...

Multiple Apple Products WebKit Component Information Disclosure Vulnerability

Apple Safari, iTunes, iOS, and iCloud are products of Apple Inc. Apple Safari is a web browser that is the default browser that comes with the Mac OS X and iOS operating systems. iTunes is a suite of media player applications. iTunes is an open source web browser engine developed by the KDE...

Arbitrary Code Execution Vulnerability in CoreMedia External Displays Component of Multiple Apple Products

Apple iOS, macOS and tvOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; tvOS is a smart TV operating system. coreMedia External Displays is one of the multimedia display components. A security vulnerability exists in the CoreMedia External Displays...

Apple iOS APPLE-SA-2016-12-12-1 has multiple vulnerabilities (CNVD-2016-12713)

Apple iOS is an operating system developed for mobile devices. Apple iOS has multiple vulnerabilities. An attacker can exploit the vulnerabilities to bypass security restrictions, execute arbitrary code or perform unauthorized actions, and obtain sensitive information...

Apple iOS/tvOS/macOS Information Disclosure Vulnerability

Apple iOS is a set of operating systems developed for mobile devices; tvOS is a smart TV operating system; and watchOS is a smart watch operating system. A security vulnerability in CFNetwork Proxies in several Apple products allows remote attackers to exploit the vulnerability to gain access to...

Apple iOS/Safari/tvOS WebKit Memory Corruption Vulnerability (CNVD-2016-08299)

Apple iOS, Safari, and tvOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with Mac OS X and iOS operating systems; and tvOS is an operating system for smart TVs. webKit is an open source web...

Apple iOS and OS X Kernel Security Restriction Bypass Vulnerability

Apple iOS and OS X are both products of the American Apple company. The former is an operating system developed for mobile devices and the latter is a specialized operating system developed for Mac computers, of which the Kernel is a kernel component. A security restriction bypass vulnerability...

CVE-2016-4708

CFNetwork in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 misparses the Set-Cookie header, which allows remote attackers to obtain sensitive information via a crafted HTTP response...

Multiple vulnerabilities in ePhone Disk

EPhone Disk is lightweight file manager to download, organize, deliver, and read files offline. ePhone Disk suffers from File Include, Local Command and Path Injection, and Remote Denial of Service vulnerabilities. Allows remote attackers to compromise web applications or mobile devices with...

The vulnerability of the iOS operating system and the Safari browser allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of the WebKit component of the iOS operating system and the Safari browser is caused by buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a service failure memory corruption through a specially crafted web page...

Apple iOS Security Restriction Bypass Vulnerability (CNVD-2016-07686)

Apple iOS is an operating system developed by Apple for mobile devices. A security restriction bypass vulnerability exists in the Printing UIKit in Apple iOS versions prior to 10. An attacker can exploit this vulnerability to bypass security restrictions, perform unauthorized actions, or obtain...

PT-2016-3354

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.3.5 Description The issue is related to the kernel in Apple iOS, which lacks protection for sensitive data. This allows attackers to obtain sensitive information from memory via a crafted app. Recommendations For...

Apple iOS Cross-Site Scripting Vulnerability

Apple iOS is an operating system for handheld devices developed by Apple Inc. A cross-site scripting vulnerability exists in Apple iOS before 9.3.3, Safari before 9.1.2, which allows remote attackers to inject arbitrary web script or HTML via a crafted HTTP/09 response...

Apple iOS Spoofing Vulnerability

Apple iOS is an operating system developed for mobile devices. A security vulnerability exists in Safari on Apple iOS that can be exploited by remote attackers to construct malicious web pages that trick users into parsing a spoofed display URL...

Multiple Apple products kernel memory corruption vulnerability (CNVD-2016-05665)

Apple iOS, OS X, tvOS, and watchOS are products of Apple Inc. Apple iOS is an operating system for mobile devices; OS X is a specialized operating system for Mac computers; tvOS is an operating system for smart TVs; and watchOS is an operating system for smart watches. kernel is one of the kernel...

On the Android Crypto Weakness, FDE Bypass, Hummingbad, and More

Mike Mimoso, Tom Spring and Chris Brook discuss the news of the week, including all things Android: the crypto weakness, the full disk encryption bypass, and new malware, Hummingbad, which impacts the mobile operating system. The three also discuss the TP-Link router fiasco. Download:...

The vulnerability of the iTunes software allows a malicious individual to compromise the confidentiality of protected information.

The vulnerability exists in CFNetwork in Apple’s iOS, OS X, and Apple TV. It stems from the lack of checks for the completeness of the HTTP cookie header before its values are interpreted. Exploiting this vulnerability allows malicious actors to circumvent access restrictions by closing the TCP...