CVE-2016-4708: Exposure of Sensitive Information to an Unauthorized Actor

CFNetwork in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 misparses the Set-Cookie header, which allows remote attackers to obtain sensitive information via a crafted HTTP response...

CVE-2016-4725: Improper Restriction of Operations within the Bounds of a Memory Buffer

IOAcceleratorFamily in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows remote attackers to obtain sensitive information from process memory or cause a denial of service memory corruption via a crafted web site...

CVE-2016-4712: Out-of-bounds Write

CoreCrypto in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows attackers to execute arbitrary code or cause a denial of service out-of-bounds write via a crafted app...

CVE-2016-4726: Improper Restriction of Operations within the Bounds of a Memory Buffer

IOAcceleratorFamily in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

CVE-2016-4778: Undefined Security Weakness

The kernel in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

CVE-2016-4775: Improper Restriction of Operations within the Bounds of a Memory Buffer

The kernel in Apple OS X before 10.12, tvOS before 10, and watchOS before 3 allows local users to gain privileges or cause a denial of service memory corruption via unspecified vectors...

CVE-2016-4772: Undefined Security Weakness

The kernel in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows remote attackers to cause a denial of service unintended lock via unspecified vectors...

CVE-2016-4753: Improper Input Validation

Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 mishandle signed disk images, which allows attackers to execute arbitrary code in a privileged context via a crafted app...

CVE-2016-4776: Out-of-bounds Read

The kernel in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows attackers to obtain sensitive memory-layout information or cause a denial of service out-of-bounds read via a crafted app, a different vulnerability than CVE-2016-4773 and CVE-2016-4774...

CVE-2016-4702: Improper Restriction of Operations within the Bounds of a Memory Buffer

Audio in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...

CVE-2016-4773: Out-of-bounds Read

The kernel in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows attackers to obtain sensitive memory-layout information or cause a denial of service out-of-bounds read via a crafted app, a different vulnerability than CVE-2016-4774 and CVE-2016-4776...

CVE-2016-4718: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in FontParser in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows remote attackers to obtain sensitive information from process memory via a crafted font file...

CVE-2016-4719

The GeoServices component in Apple iOS before 10 and watchOS before 3 does not properly restrict access to PlaceData information, which allows attackers to discover physical locations via a crafted application...

Information disclosure

The GeoServices component in Apple iOS before 10 and watchOS before 3 does not properly restrict access to PlaceData information, which allows attackers to discover physical locations via a crafted application...

CVE-2016-4719

The GeoServices component in Apple iOS before 10 and watchOS before 3 does not properly restrict access to PlaceData information, which allows attackers to discover physical locations via a crafted application...

CVE-2016-4719

The CVE-2016-4719 entry affects Apple’s GeoServices component in iOS (pre-10) and watchOS (pre-3). The issue is a permissions/configuration flaw in PlaceData that allows an app to read sensitive location information. Apple’s security notes enumerate GeoServices/CVE-2016-4719 under watchOS 3 and i...

CVE-2016-4719: Exposure of Sensitive Information to an Unauthorized Actor

The GeoServices component in Apple iOS before 10 and watchOS before 3 does not properly restrict access to PlaceData information, which allows attackers to discover physical locations via a crafted application...

Apple watchOS information disclosure vulnerability

Apple watchOS is a smartwatch operating system developed by Apple. An information disclosure vulnerability exists in GeoServices in previous versions of Apple watchOS 3. An attacker can exploit this vulnerability to gain unauthorized access to potentially sensitive information...

iOS 10 Security Updates Move to HTTPS

Update Apple has finally moved its iOS security update mechanism to HTTPS with today’s release of iOS 10. Previously, updates were sent to devices over HTTP and attackers already present on a network could interfere with updates. “An issue existed in iOS updates, which did not properly secure use...

About the security content of watchOS 3

About the security content of watchOS 3 This document describes the security content of watchOS 3. For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on th...