CVE-2017-7009

CVE-2017-7009 affects Apple devices via the IOUSBFamily component. Apple advisories show a memory corruption issue that can allow an attacker to execute arbitrary code with kernel privileges or cause a denial of service when a crafted app is used. Affected products include iOS <10.3.3, macOS &...

CVE-2017-7013

CVE-2017-7013 affects Apple products via libxml2: parsing a malicious XML document may cause an out-of-bounds read and disclosures of user information or an app crash. Impacted: iOS <10.3.3; macOS <10.12.6; tvOS <10.2.2; watchOS <3.2.3; iTunes <12.6.2 on Windows; iCloud

CVE-2017-7022

CVE-2017-7022 affects Apple Kernel in iOS ≤10.3.2/10.3.3, macOS ≤10.12.5/10.12.6, tvOS ≤10.2.1/10.2.2, and watchOS ≤3.2.2/3.2.3. Description: Memory corruption in the Kernel could allow a locally adjacent attacker to execute arbitrary code with system privileges or cause a denial of service via a...

CVE-2017-7023

CVE-2017-7023 is a kernel memory corruption vulnerability in Apple’s Kernel affecting iOS before 10.3.3, macOS before 10.12.6, tvOS before 10.2.2, and watchOS before 3.2.3. A crafted app may allow arbitrary code execution with kernel/system privileges or cause memory corruption leading to DoS. Ap...

CVE-2017-7024

CVE-2017-7024 is a kernel memory corruption vulnerability affecting Apple devices, with iOS prior to 10.3.3, macOS prior to 10.12.6, tvOS prior to 10.2.2, and watchOS prior to 3.2.3. The issue, in the Kernel component, could allow an attacker via a crafted app to execute arbitrary code in a privi...

CVE-2017-7025

CVE-2017-7025 concerns Apple devices and the Kernel component. A memory corruption issue in the Kernel could allow an attacker to execute arbitrary code with system/kernel privileges or cause a denial of service when a crafted app is processed locally on affected devices. Affected products includ...

CVE-2017-7026

CVE-2017-7026 affects Apple platforms: iOS before 10.3.3, macOS before 10.12.6, tvOS before 10.2.2, and watchOS before 3.2.3, with the Kernel as the vulnerable component. The issue allows an attacker to execute arbitrary code in a privileged context or cause a denial of service via memory corrupt...

CVE-2017-7027

CVE-2017-7027 affects Apple devices including iOS <= 10.3.3, macOS <= 10.12.6, tvOS <= 10.2.2, and watchOS

CVE-2017-7028

CVE-2017-7028 affects Apple kernel on iOS (pre-10.3.3), macOS (pre-10.12.6), tvOS (pre-10.2.2), and watchOS (pre-3.2.3). Root cause: a validation/memory-read control gap in the Kernel that could let an app read restricted memory. Impact: an attacker could read memory contents that should be prote...

CVE-2017-7029

CVE-2017-7029 affects Apple devices with a Kernel memory access issue. A crafted iOS app can bypass memory-read restrictions, potentially exposing restricted memory. Affected software: iOS < 10.3.3, macOS < 10.12.6, tvOS < 10.2.2, watchOS

CVE-2017-7047

CVE-2017-7047 affects Apple platforms (iOS <10.3.3, macOS <10.12.6, tvOS <10.2.2, watchOS

CVE-2017-7063

CVE-2017-7063 affects Apple iOS (pre-10.3.3) and watchOS (pre-3.2.3) in the Messages component, enabling a remote attacker to cause memory consumption and a potential application termination/crash. Apple’s security content for iOS 10.3.3 and watchOS 3.2.3 notes this as a memory consumption issue ...

CVE-2017-7068

CVE-2017-7068 affects Apple platforms and is related to the libarchive component. Affected products include iOS < 10.3.3, macOS < 10.12.6, tvOS < 10.2.2, and watchOS

CVE-2017-7069

CVE-2017-7069 is a kernel memory corruption vulnerability that could allow an attacker with crafted app to execute arbitrary code with system/kernel privileges or cause a denial of service. Affected: iOS <10.3.3, macOS <10.12.6, tvOS <10.2.2, watchOS

CVE-2017-7062

CVE-2017-7062 affects Apple’s Contacts component and was present in iOS < 10.3.3, macOS < 10.12.6, tvOS < 10.2.2, and watchOS

Apple Patches 'BroadPwn' Bug in iOS 10.3.3

Apple released iOS 10.3.3 Wednesday, which serves as a cumulative update that includes patches for multiple vulnerabilities including the high-profile BroadPwn bug that allowed an attacker to seize control of a targeted iOS device. BroadPwn was revealed earlier this month as a flaw in Broadcom...

CVE-2017-7009: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the "IOUSBFamily" component. It allows attackers to execute arbitrary code in a privileged conte...

CVE-2017-7062: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the "Contacts" component. A buffer overflow allows remote attackers to execute arbitrary code or...

CVE-2017-7047: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the "libxpc" component. It allows attackers to execute arbitrary code in a privileged context or...

CVE-2017-7029: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a...