7961 matches found
CVE-2016-7615
CVE-2016-7615 concerns a kernel‑level vulnerability in Apple’s operating systems (iOS prior to 10.2, macOS prior to 10.12.2, watchOS prior to 3.1.3) that can be triggered by a local user. The connected data explicitly describes this as a kernel memory‑management issue (use‑after‑free) with the im...
CVE-2016-4680
CVE-2016-4680 affects Apple kernels across iOS (pre-10.1), tvOS (pre-10.0.1), and watchOS (pre-3.1). The vulnerability exposes kernel memory via a crafted app due to multiple input-validation issues in MIG-generated code, enabling a local attacker to disclose kernel memory. Apple addressed this i...
CVE-2016-7643
CVE-2016-7643 affects Apple devices with ImageIO. A crafted web site can trigger an out-of-bounds read in ImageIO, leaking memory or causing a DoS. Affected: iOS <10.2, macOS <10.12.2, watchOS
CVE-2016-7714
CVE-2016-7714 affects Apple platforms (iOS before 10.2, macOS before 10.12.2, watchOS before 3.1.3) via the IOKit IOReportUserClient path. Connected advisory ZDI-16-687 details an OOB read in IOReportUserClient that allows a local attacker to disclose kernel memory-layout information. The root ca...
CVE-2017-2352
CVE-2017-2352 affects Apple devices: iOS before 10.2.1 and watchOS before 3.1.3. The issue is tied to the Unlock with iPhone component, described as a logic flaw in state management that can bypass wrist‑presence protection and unlock an Apple Watch via unspecified vectors. The linked Apple advis...
CVE-2017-2363
CVE-2017-2363 affects Apple WebKit components across iOS (iOS before 10.2.1), Safari (before 10.0.3), tvOS (before 10.1.1) and watchOS (before 3.1.3). The issue permits a remote attacker to bypass the Same Origin Policy and exfiltrate sensitive data via a crafted web site, due to a WebKit prototy...
CVE-2016-7612
CVE-2016-7612 affects macOS Sierra 10.12.1 era (Kernel). The Apple security content entries show the issue as a Kernel memory corruption vulnerability that could allow an attacker to execute arbitrary code with kernel privileges via a crafted app; remediation is provided in macOS 10.12.2 Security...
CVE-2016-4669
This CVE corresponds to a Safari WebKit JIT exploit for iOS 7.1.2 that chain-exploits a JIT optimization bug (CVE-2016-4669) to write shellcode into RWX memory, obtain kernel RW/root, and disable code signing. The linked Metasploit/PacketStorm entries confirm a kernel-level exploit used to run a ...
CVE-2016-7636
CVE-2016-7636 affects Apple platforms (iOS 10.2 and earlier, macOS 10.12.2 and earlier, watchOS 3.1.3 and earlier). Root cause: in the Security component, OCSP responder URL handling can be abused by a man-in-the-middle to cause an application crash (denial of service). Impact is partial availabi...
CVE-2016-7606
CVE-2016-7606 targets Apple platforms (iOS pre-10.2, macOS pre-10.12.2, watchOS pre-3.1.3) in the Kernel. The issue enables arbitrary code execution in a privileged context or memory corruption–driven denial of service via a crafted app. The connected documents indicate multiple kernel memory cor...
CVE-2017-2363
An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. watchOS before 3.1.3 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain...
CVE-2016-4665
CVE-2016-4665 is an Apple vulnerability affecting the Sandbox Profiles component, allowing a crafted app to read audio-recording metadata on affected systems. The issue is listed for iOS prior to 10.1, tvOS prior to 10.0.1, and watchOS prior to 3.1. Affected products include iPhone/iPad/iPod touc...
CVE-2016-4675
CVE-2016-4675 affects Apple platforms via the libxpc component. The issue is a logic flaw that could allow an attacker to execute arbitrary code in a privileged context when a crafted app is involved, on macOS Sierra 10.12.x, iOS 10.x, tvOS 10.x, and watchOS 3.x. Apple addressed this with securit...
CVE-2016-7663
CVE-2016-7663 affects Apple’s CoreFoundation. In macOS <10.12.2, iOS <10.2, and watchOS
CVE-2016-4664
An issue was discovered in certain Apple products. iOS before 10.1 is affected. tvOS before 10.0.1 is affected. watchOS before 3.1 is affected. The issue involves the "Sandbox Profiles" component, which allows attackers to read photo-directory metadata via a crafted app...
CVE-2016-7658
CVE-2016-7658 affects Apple devices (iOS <10.2, macOS <10.12.2, watchOS
CVE-2016-7588
An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "CoreMedia Playback" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory...
CVE-2016-7662
An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "Security" component, which allows remote attackers to spoof certificates via unspecified vectors...
CVE-2016-7657
CVE-2016-7657 is an Apple IOKit memory-corruption vulnerability that could allow a crafted app to read kernel memory on affected systems. Public details in the initial entry reference iOS < 10.2, macOS < 10.12.2, and watchOS