CVE-2016-7659

An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "Audio" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...

CVE-2016-7615

An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "Kernel" component, which allows local users to cause a denial of service via unspecified vectors...

CVE-2016-4680

CVE-2016-4680 affects Apple kernels across iOS (pre-10.1), tvOS (pre-10.0.1), and watchOS (pre-3.1). The vulnerability exposes kernel memory via a crafted app due to multiple input-validation issues in MIG-generated code, enabling a local attacker to disclose kernel memory. Apple addressed this i...

CVE-2016-4691

An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "FontParser" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption an...

CVE-2016-7636

CVE-2016-7636 affects Apple platforms (iOS 10.2 and earlier, macOS 10.12.2 and earlier, watchOS 3.1.3 and earlier). Root cause: in the Security component, OCSP responder URL handling can be abused by a man-in-the-middle to cause an application crash (denial of service). Impact is partial availabi...

CVE-2016-7637

An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "Kernel" component. It allows local users to gain privileges or cause a denial of service memory corruption via unspecified...

CVE-2016-7663

An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "CoreFoundation" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruptio...

CVE-2016-7660

An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "syslog" component. It allows local users to gain privileges via unspecified vectors related to Mach port name references...

CVE-2016-7714

An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "IOKit" component. It allows local users to obtain sensitive kernel memory-layout information via unspecified vectors...

CVE-2017-2370

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. macOS before 10.12.3 is affected. tvOS before 10.1.1 is affected. watchOS before 3.1.3 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or...

CVE-2016-7606

CVE-2016-7606 targets Apple platforms (iOS pre-10.2, macOS pre-10.12.2, watchOS pre-3.1.3) in the Kernel. The issue enables arbitrary code execution in a privileged context or memory corruption–driven denial of service via a crafted app. The connected documents indicate multiple kernel memory cor...

CVE-2016-7612

CVE-2016-7612 affects macOS Sierra 10.12.1 era (Kernel). The Apple security content entries show the issue as a Kernel memory corruption vulnerability that could allow an attacker to execute arbitrary code with kernel privileges via a crafted app; remediation is provided in macOS 10.12.2 Security...

CVE-2016-4675

An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. tvOS before 10.0.1 is affected. watchOS before 3.1 is affected. The issue involves the "libxpc" component. It allows attackers to execute arbitrary code in a privileged context via a...

CVE-2016-7643

CVE-2016-7643 affects Apple devices with ImageIO. A crafted web site can trigger an out-of-bounds read in ImageIO, leaking memory or causing a DoS. Affected: iOS <10.2, macOS <10.12.2, watchOS

CVE-2016-4669

This CVE corresponds to a Safari WebKit JIT exploit for iOS 7.1.2 that chain-exploits a JIT optimization bug (CVE-2016-4669) to write shellcode into RWX memory, obtain kernel RW/root, and disable code signing. The linked Metasploit/PacketStorm entries confirm a kernel-level exploit used to run a ...

CVE-2016-4693

CVE-2016-4693 affects Apple platforms (iOS 10.2 and earlier, macOS 10.12.1/10.12.2 and earlier, watchOS 3.1.3 and earlier) where the Security component could allow bypassing cryptographic protections by leveraging the 3DES cipher. The vulnerability is tied to the removal of 3DES as a default ciph...

CVE-2016-7615

CVE-2016-7615 concerns a kernel‑level vulnerability in Apple’s operating systems (iOS prior to 10.2, macOS prior to 10.12.2, watchOS prior to 3.1.3) that can be triggered by a local user. The connected data explicitly describes this as a kernel memory‑management issue (use‑after‑free) with the im...

CVE-2016-4691

CVE-2016-4691 affects Apple platforms where the FontParser component mishandles crafted font files, causing memory corruption and potential remote code execution or a denial of service. Affected: iOS prior to 10.2, macOS prior to 10.12.2, watchOS prior to 3.1.3. The vulnerability is addressed by ...

CVE-2016-4664

CVE-2016-4664 affects iOS before 10.1, tvOS before 10.0.1, and watchOS before 3.1. The issue is in Sandbox Profiles, allowing a crafted app to read metadata for photo directories. The Apple TV/Sandbox Profiles entries mirror this access issue (metadata disclosure for photo directories) alongside ...

CVE-2016-7714

CVE-2016-7714 affects Apple platforms (iOS before 10.2, macOS before 10.12.2, watchOS before 3.1.3) via the IOKit IOReportUserClient path. Connected advisory ZDI-16-687 details an OOB read in IOReportUserClient that allows a local attacker to disclose kernel memory-layout information. The root ca...