9458 matches found
CVE-2016-1750
CVE-2016-1750 involves a use-after-free vulnerability in the kernel that affects Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2. The flaw could let an attacker’s crafted app execute arbitrary code with kernel/priviliged context. Apple documentation attributes t...
CVE-2016-1775
TrueTypeScaler in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font file...
CVE-2016-1784
CVE-2016-1784 affects WebKit History handling in Apple iOS before 9.3, Safari before 9.1, and tvOS before 9.2, enabling remote websites to cause resource exhaustion and a crash (DoS). Root cause: flaws in History/web content handling within WebKit. Affected products: iOS Safari/WebKit and tvOS. M...
CVE-2016-1752
The kernel in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows attackers to cause a denial of service via a crafted app...
CVE-2016-1750
Use-after-free vulnerability in the kernel in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows attackers to execute arbitrary code in a privileged context via a crafted app...
CVE-2016-1740
CVE-2016-1740 affects FontParser in Apple platforms (iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, watchOS before 2.2). Description: opening a maliciously crafted PDF can cause a memory corruption and may lead to arbitrary code execution or application termination. Root cause is a memory ...
CVE-2016-1753
CVE-2016-1753 affects Apple’s kernel on iOS prior to 9.3, OS X prior to 10.11.4, tvOS prior to 9.2, and watchOS prior to 2.2. It is described by Apple advisories as a kernel-level issue enabling an application to bypass code signing and potentially execute arbitrary code with kernel privileges. P...
CVE-2016-1754
The kernel in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app, a different vulnerability than CVE-2016-1755...
CVE-2016-1775
CVE-2016-1775 corresponds to a TrueTypeScaler memory corruption issue in Apple’s font processing stack. In affected products (iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, watchOS before 2.2), a crafted font file could lead to arbitrary code execution or memory corruption, i.e., a remote ...
CVE-2016-1751
CVE-2016-1751 affects Apple kernels on iOS pre-9.3, tvOS pre-9.2 and watchOS pre-2.2. The issue is failure to properly restrict execute permissions, enabling a crafted app to bypass code-signing protection. In practice, this can allow an attacker to gain kernel-level execution by loading a malici...
CVE-2016-1755
CVE-2016-1755 affects Apple products including iOS prior to 9.3, OS X prior to 10.11.4, tvOS prior to 9.2, and watchOS prior to 2.2. The issue is a kernel memory disclosure caused by an out-of-bounds read in the Kernel, as described by Apple’s security content. The root cause is an out-of-bounds ...
CVE-2016-1753
Multiple integer overflows in the kernel in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allow attackers to execute arbitrary code in a privileged context via a crafted app...
CVE-2016-1748
CVE-2016-1748 affects IOHIDFamily and allows an unprivileged app to obtain kernel memory layout information by exploiting a memory‑corruption issue. Apple’s security content confirms this vulnerability across multiple platforms and versions, with mitigations delivered in iOS 9.3, OS X 10.11.4, tv...
Apple iOS WebKit Memory Corruption Vulnerability (CNVD-2016-01845)
Apple iOS, OS X and tvOS are operating systems from Apple Inc. Apple iOS is developed for mobile devices; OS X is developed for Mac computers; and tvOS is developed for smart TVs. A memory corruption vulnerability exists in WebKit in Apple iOS versions prior to 9.3, Safari versions prior to 9.1,...
Apple Releases Multiple Security Updates
Apple has released security updates for iOS, watchOS, tvOS, Xcode, OS X El Capitan, OS X Server 5.1, and Safari to address multiple vulnerabilities. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system. Available updates include: iOS 9.3...
CVE-2016-1727
WebKit, as used in Apple iOS before 9.2.1, Safari before 9.0.3, and tvOS before 9.1.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2016-1724...
CVE-2016-1724
WebKit, as used in Apple iOS before 9.2.1, Safari before 9.0.3, and tvOS before 9.1.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2016-1727...
CVE-2016-1724
WebKit, as used in Apple iOS before 9.2.1, Safari before 9.0.3, and tvOS before 9.1.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2016-1727...