CVE-2016-4776

The kernel in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows attackers to obtain sensitive memory-layout information or cause a denial of service out-of-bounds read via a crafted app, a different vulnerability than CVE-2016-4773 and CVE-2016-4774...

CVE-2016-4773

CVE-2016-4773: Kernel memory layout disclosure and potential DoS in Apple platforms. Concrete details show that the issue resides in the kernel across iOS <10, macOS <10.12, tvOS <10, and watchOS

CVE-2016-4702

CVE-2016-4702 affects Apple Audio in iOS <10, macOS (OS X) <10.12, tvOS <10, and watchOS

CVE-2016-4737

WebKit in Apple iOS before 10, Safari before 10, tvOS before 10, and watchOS before 3 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site...

CVE-2016-4773

The kernel in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows attackers to obtain sensitive memory-layout information or cause a denial of service out-of-bounds read via a crafted app, a different vulnerability than CVE-2016-4774 and CVE-2016-4776...

CVE-2016-4712

CVE-2016-4712 affects CoreCrypto across Apple platforms (iOS before 10, macOS before 10.12, tvOS before 10, watchOS before 3). The vulnerability is an out-of-bounds write in CoreCrypto that could allow an attacker to execute arbitrary code or cause a denial of service via a crafted application. R...

CVE-2016-4738

CVE-2016-4738 is a memory corruption vulnerability in libxslt. The issue occurs in the XSLT processing runtime library (libxslt) and could allow a remote attacker to execute arbitrary code or cause a denial of service when a crafted web page is processed. Debian’s security advisory DSA-3709-1 con...

CVE-2016-4658

xpointer.c in libxml2 before 2.9.5 as used in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3, and other products does not forbid namespace nodes in XPointer ranges, which allows remote attackers to execute arbitrary code or cause a denial of service use-after-free an...

CVE-2016-4776

CVE-2016-4776 concerns the kernel in Apple platforms prior to updates listed below: iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3. An attacker who can run a crafted app may obtain sensitive memory-layout information or cause a denial of service via an out-of-bounds read i...

CVE-2016-4774

CVE-2016-4774 affects Apple’s kernel in iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3. The vulnerability is a kernel memory layout disclosure and out-of-bounds read triggered by a crafted app, enabling attackers to obtain sensitive memory-layout information or cause a den...

CVE-2016-4738

libxslt in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site...

CVE-2016-4702

Audio in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...

CVE-2016-4708

CVE-2016-4708 affects CFNetwork across Apple platforms (iOS before 10, OS X before 10.12, tvOS before 10, watchOS before 3). Root cause: input parsing/validation flaw in the Set-Cookie header handling that can disclose sensitive information via a crafted HTTP response. Impact: information disclos...

CVE-2016-4772

CVE-2016-4772 is a kernel-stage vulnerability documented in Apple security records, with concrete detail in the Apple Watch security entry. The vulnerability is described as a remote denial-of-service condition caused by a lock handling issue in the kernel. The linked entry notes that the issue w...

CVE-2016-4718

The CVE-2016-4718 entry concerns a buffer overflow in FontParser that affects multiple Apple platforms when processing malicious font files. Specifically, Apple iOS before 10, macOS (OS X) before 10.12, tvOS before 10, and watchOS before 3 are listed as vulnerable, with the issue allowing a remot...

CVE-2016-4778

CVE-2016-4778 affects the Kernel on Apple platforms (iOS before 10, macOS before 10.12, tvOS before 10, watchOS before 3). It enables arbitrary code execution in a privileged context or memory corruption via a crafted app. Apple’s security content pages indicate fixes in iOS 10, macOS Sierra 10.1...

CVE-2016-4658

xpointer.c in libxml2 before 2.9.5 as used in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3, and other products does not forbid namespace nodes in XPointer ranges, which allows remote attackers to execute arbitrary code or cause a denial of service use-after-free an...

CVE-2016-4774: Out-of-bounds Read

The kernel in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows attackers to obtain sensitive memory-layout information or cause a denial of service out-of-bounds read via a crafted app, a different vulnerability than CVE-2016-4773 and CVE-2016-4776...

CVE-2016-4777: NULL Pointer Dereference

The kernel in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows attackers to execute arbitrary code in a privileged context or cause a denial of service invalid pointer dereference via a crafted app...

CVE-2016-4737: Improper Restriction of Operations within the Bounds of a Memory Buffer

WebKit in Apple iOS before 10, Safari before 10, tvOS before 10, and watchOS before 3 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site...