CVE-2016-4665

An issue was discovered in certain Apple products. iOS before 10.1 is affected. tvOS before 10.0.1 is affected. watchOS before 3.1 is affected. The issue involves the "Sandbox Profiles" component, which allows attackers to read audio-recording metadata via a crafted app...

CVE-2016-4675

An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. tvOS before 10.0.1 is affected. watchOS before 3.1 is affected. The issue involves the "libxpc" component. It allows attackers to execute arbitrary code in a privileged context via a...

CVE-2016-7714

An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "IOKit" component. It allows local users to obtain sensitive kernel memory-layout information via unspecified vectors...

CVE-2016-7615

An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "Kernel" component, which allows local users to cause a denial of service via unspecified vectors...

CVE-2016-7626

An issue was discovered in certain Apple products. iOS before 10.2 is affected. tvOS before 10.1 is affected. watchOS before 3.1.1 is affected. The issue involves the "Profiles" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...

CVE-2016-4691

CVE-2016-4691 affects Apple platforms where the FontParser component mishandles crafted font files, causing memory corruption and potential remote code execution or a denial of service. Affected: iOS prior to 10.2, macOS prior to 10.12.2, watchOS prior to 3.1.3. The vulnerability is addressed by ...

CVE-2016-7662

CVE-2016-7662 affects Apple platforms: iOS before 10.2, macOS before 10.12.2, and watchOS before 3.1.3. The issue lies in the Security component and allows remote attackers to spoof certificates via unspecified vectors, enabling potential trust bypass. The CVSS data indicates a network exploit wi...

CVE-2016-7584

CVE-2016-7584 affects Apple platforms (iOS before 10.1, macOS before 10.12.1, tvOS before 10.0.1, watchOS before 3.1) in the AppleMobileFileIntegrity component. Root cause: a validation issue in handling code signatures that allows a signed executable to be substituted if it uses the same team ID...

CVE-2016-4688

CVE-2016-4688 affects FontParser in macOS (macOS Sierra 10.12.3 security content). The issue: memory corruption/buffer handling in font file processing, enabling remote code execution when a crafted font is opened. Apple references multiple FontParser CVEs (including 2017-2406/2407/2439/2487, etc...

CVE-2016-7637

An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "Kernel" component. It allows local users to gain privileges or cause a denial of service memory corruption via unspecified...

CVE-2016-7584

An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. tvOS before 10.0.1 is affected. watchOS before 3.1 is affected. The issue involves the "AppleMobileFileIntegrity" component, which allows remote attackers to spoof signed code by usin...

CVE-2016-7659

An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "Audio" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...

CVE-2016-7660

An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "syslog" component. It allows local users to gain privileges via unspecified vectors related to Mach port name references...

CVE-2016-4693

CVE-2016-4693 affects Apple platforms (iOS 10.2 and earlier, macOS 10.12.1/10.12.2 and earlier, watchOS 3.1.3 and earlier) where the Security component could allow bypassing cryptographic protections by leveraging the 3DES cipher. The vulnerability is tied to the removal of 3DES as a default ciph...

CVE-2016-4664

CVE-2016-4664 affects iOS before 10.1, tvOS before 10.0.1, and watchOS before 3.1. The issue is in Sandbox Profiles, allowing a crafted app to read metadata for photo directories. The Apple TV/Sandbox Profiles entries mirror this access issue (metadata disclosure for photo directories) alongside ...

CVE-2016-7663

An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "CoreFoundation" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruptio...

CVE-2016-4691

An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "FontParser" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption an...

CVE-2017-2370

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. macOS before 10.12.3 is affected. tvOS before 10.1.1 is affected. watchOS before 3.1.3 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or...

CVE-2016-7636

An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "Security" component, which allows man-in-the-middle attackers to cause a denial of service application crash via vectors...

CVE-2016-7595

CVE-2016-7595 (Apple CoreText font handling) affects Apple platforms where CoreText processes crafted font files. In macOS Sierra/iOS 10.x/watchOS 3.x, memory corruption in CoreText’s font handling may allow remote code execution or cause a denial of service (crash). Affected: iOS < 10.2, macO...