UBUNTU-CVE-2016-4737

WebKit in Apple iOS before 10, Safari before 10, tvOS before 10, and watchOS before 3 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site...

UBUNTU-CVE-2016-4766

WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2016-4759, CVE-2016-4765, CVE-2016-4767,...

UBUNTU-CVE-2016-4758

WebKit in Apple iOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 does not properly restrict access to the location variable, which allows remote attackers to obtain sensitive information via a crafted web site...

UBUNTU-CVE-2016-4611

WebKit in Apple iOS before 10, Safari before 10, and tvOS before 10 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2016-4730, CVE-2016-4733, CVE-2016-4734, and CVE-2016-4735...

CVE-2016-4611

WebKit in Apple iOS before 10, Safari before 10, and tvOS before 10 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2016-4730, CVE-2016-4733, CVE-2016-4734, and CVE-2016-4735...

CVE-2016-4759

WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2016-4765, CVE-2016-4766, CVE-2016-4767,...

CVE-2016-4733

WebKit in Apple iOS before 10, Safari before 10, and tvOS before 10 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2016-4611, CVE-2016-4730, CVE-2016-4734, and CVE-2016-4735...

CVE-2016-4769

WebKit in Apple iTunes before 12.5.1 on Windows and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site...

CVE-2016-4611

WebKit in Apple iOS before 10, Safari before 10, and tvOS before 10 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2016-4730, CVE-2016-4733, CVE-2016-4734, and CVE-2016-4735...

CVE-2016-4733

CVE-2016-4733 affects WebKit in Apple iOS prior to 10, Safari prior to 10, and tvOS prior to 10. The issue allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted website. This is described as a distinct vulnerability from CVE-2016-4611, CV...

CVE-2016-4735

CVE-2016-4735 affects WebKit in Apple iOS before 10, Safari before 10, and tvOS before 10. The vulnerability allows an attacker to trigger remote code execution or a denial of service via a crafted web site, caused by memory corruption. Connected sources confirm the affected platforms and failure...

CVE-2016-4763

CVE-2016-4763 affects WKWebView in WebKit across Apple platforms (iOS before 10, Safari before 10) and iTunes before 12.5.1 on Windows. Root cause: certificate validation failure in WKWebView leads to improper verification of HTTPS X.509 certificates, enabling MITM attackers to spoof servers and ...

CVE-2016-4769

CVE-2016-4769 affects WebKit in Apple iTunes for Windows (pre-12.5.1) and Safari (pre-10). The issue allows remote code execution or memory corruption leading to a crash when processing crafted web content, due to a parsing/memory handling flaw in WebKit. Apple’s mitigations involve updating to i...

CVE-2016-4768

CVE-2016-4768 affects WebKit components across Apple platforms: iOS prior to 10, tvOS prior to 10, Safari prior to 10, and iTunes on Windows prior to 12.5.1. The vulnerability is triggered by a crafted web site and results in remote code execution or memory corruption, with impact on confidential...

CVE-2016-4767

CVE-2016-4767 affects WebKit used in Apple iOS (pre-10) , tvOS (pre-10) , iTunes (pre-12.5.1 on Windows) , and Safari (pre-10) . The root cause is memory corruption in WebKit that enables a remote attacker to execute arbitrary code or cause a denial of service via a crafted web site. The availabl...

CVE-2016-4737

WebKit in Apple iOS before 10, Safari before 10, tvOS before 10, and watchOS before 3 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site...

CVE-2016-4758

CVE-2016-4758 affects WebKit components in Apple iOS prior to 10, iTunes prior to 12.5.1 on Windows, and Safari prior to 10. It is a permissions-based information disclosure vulnerability related to access to the location variable in WebKit that could leak sensitive data when visiting crafted sit...

CVE-2016-4763

WKWebView in WebKit in Apple iOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 does not properly verify X.509 certificates from HTTPS servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2016-4730

WebKit in Apple iOS before 10, Safari before 10, and tvOS before 10 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2016-4611, CVE-2016-4733, CVE-2016-4734, and CVE-2016-4735...

CVE-2016-4728

CVE-2016-4728 affects WebKit in Apple iOS (pre-10), tvOS (pre-10), iTunes for Windows (pre-12.5.1) and Safari (pre-10). Root cause: mishandling of error prototypes, enabling remote attackers to execute arbitrary code via a crafted webpage. Public fixes exist: iOS/tvOS Safari patches in subsequent...