14168 matches found
CVE-2016-1783
WebKit in Apple iOS before 9.3, Safari before 9.1, and tvOS before 9.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site...
CVE-2016-1786
The Page Loading implementation in WebKit in Apple iOS before 9.3 and Safari before 9.1 mishandles HTTP responses with a 3xx aka redirection status code, which allows remote attackers to spoof the displayed URL, bypass the Same Origin Policy, and obtain sensitive cached information via a crafted...
CVE-2016-1784
CVE-2016-1784 affects WebKit History handling in Apple iOS before 9.3, Safari before 9.1, and tvOS before 9.2, enabling remote websites to cause resource exhaustion and a crash (DoS). Root cause: flaws in History/web content handling within WebKit. Affected products: iOS Safari/WebKit and tvOS. M...
CVE-2016-1779
CVE-2016-1779 affects WebKit in Apple iOS < 9.3 and Safari
CVE-2016-1786
The CVE-2016-1786 issue affects WebKit Page Loading in Apple iOS prior to 9.3 and Safari prior to 9.1. It arises from improper handling of HTTP 3xx responses, allowing a remote attacker to spoof the displayed URL, bypass Same Origin Policy, and potentially read sensitive cached data via a crafted...
CVE-2016-1783
CVE-2016-1783 affects WebKit in Apple iOS (pre-9.3), Safari (pre-9.1), and tvOS (pre-9.2). Description: remote attacker can cause memory corruption via a crafted web site, potentially enabling arbitrary code execution or a denial of service. Root cause: memory corruption in WebKit components expo...
CVE-2016-1780
WebKit in Apple iOS before 9.3 does not prevent hidden web views from reading orientation and motion data, which allows remote attackers to obtain sensitive information about a device's physical environment via a crafted web site...
CVE-2016-1782
WebKit in Apple iOS before 9.3 and Safari before 9.1 does not properly restrict redirects that specify a TCP port number, which allows remote attackers to bypass intended port restrictions via a crafted web site...
CVE-2016-1785
The Page Loading implementation in WebKit in Apple iOS before 9.3 and Safari before 9.1 mishandles character encoding during access to cached data, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site...
CVE-2016-1778
CVE-2016-1778 affects WebKit in Apple iOS before 9.3 and Safari before 9.1. Root cause is memory corruption in WebKit components triggered by a crafted website, enabling remote code execution or a denial of service. Reported severity is high (CVSSv3 base 8.8). The provided connected sources confi...
CVE-2016-1781
CVE-2016-1781 affects Apple WebKit in iOS before 9.3 and Safari before 9.1, where handling of attachment URLs could enable remote tracking of users via unspecified vectors. The Apple security content for Safari 9.1 (WebKit entry) indicates a concrete mitigation: a hidden web page may access devic...
CVE-2016-1780
CVE-2016-1780 affects WebKit in Apple iOS prior to 9.3, where hidden web views can access device orientation and motion data. The root issue allows a crafted web site to read the device’s physical environment information, potentially exposing sensitive data. Public references indicate this is mit...
Apple iOS WebKit Memory Corruption Vulnerability (CNVD-2016-01845)
Apple iOS, OS X and tvOS are operating systems from Apple Inc. Apple iOS is developed for mobile devices; OS X is developed for Mac computers; and tvOS is developed for smart TVs. A memory corruption vulnerability exists in WebKit in Apple iOS versions prior to 9.3, Safari versions prior to 9.1,...
Apple iOS WebKit Information Disclosure Vulnerability (CNVD-2016-01841)
Apple iOS is the operating system used by Apple for a number of smart devices. WebKit is a set of open-source web browser engines developed by KDE, Apple, Google and other companies, and is currently used by browsers such as Apple Safari and Google Chrome. A security vulnerability exists in the...
Apple iOS WebKit Information Disclosure Vulnerability (CNVD-2016-01842)
Apple iOS is the operating system used by Apple for a number of smart devices. WebKit is a set of open-source web browser engines developed by KDE, Apple, Google and other companies, and is currently used by browsers such as Apple Safari and Google Chrome. Versions of iOS prior to 9.3 have a...
Apple iOS WebKit Information Disclosure Vulnerability (CNVD-2016-01844)
Apple iOS is the operating system used by Apple for a number of smart devices. WebKit is a set of open-source web browser engines developed by KDE, Apple, Google and other companies, and is currently used by browsers such as Apple Safari and Google Chrome. A security vulnerability exists in the...
Apple iOS WebKit Information Disclosure Vulnerability (CNVD-2016-01843)
Apple iOS is the operating system used by Apple for a number of smart devices. WebKit is a set of open-source web browser engines developed by KDE, Apple, Google and other companies, and is currently used by browsers such as Apple Safari and Google Chrome. Versions of iOS prior to 9.3 and Safari...
Apple iOS/Safari Information Disclosure Vulnerability
Apple iOS is Apple's operating system for several smart devices.Apple Safari is an American Apple web browser that is the default browser that comes with the Mac OS X and iOS operating systems. The page load implementation in WebKit in Apple iOS before 9.3 and Safari before 9.1 fails to properly...
Apple iOS/Safari Information Disclosure Vulnerability (CNVD-2016-01839)
Apple iOS is Apple's operating system for several smart devices.Apple Safari is an American Apple web browser that is the default browser that comes with the Mac OS X and iOS operating systems. The page load implementation in WebKit in Apple iOS before 9.3 and Safari before 9.1 fails to properly...
Apple iOS WebKit History implements denial of service vulnerability
Apple iOS is the operating system used by Apple for a number of smart devices. WebKit is a set of open-source web browser engines developed by KDE, Apple, Google and other companies, and is currently used by browsers such as Apple Safari and Google Chrome. Versions of iOS prior to 9.3, Safari pri...