CVE-2017-2391

The CVE-2017-2391 issue affects Apple iWork exports (Pages, Numbers, Keynote) on macOS and iOS prior to the patched versions. Root cause: iWork exported PDFs used weak 40-bit RC4 encryption, enabling exposure of password-protected PDF contents. Affected versions include Pages 6.0/6.1, Numbers 4.0...

CVE-2015-3784

CVE-2015-3784 affects Apple’s Office Viewer in iOS versions before 8.4.1 and OS X versions before 10.10.5. The issue arises from an XML External Entity (XXE) vulnerability where an external entity declaration, combined with an entity reference, enables a remote attacker to read arbitrary files vi...

CVE-2015-7032

CVE-2015-7032 affects Apple iWork suite: Keynote <6.6, Pages <5.6, Numbers <3.6, and iWork for iOS

CVE-2015-7033

CVE-2015-7033 affects Apple iWork suite: Keynote 6.6, Pages 5.6, Numbers 3.6, and iWork for iOS 2.6. Root cause is memory corruption due to parsing a maliciously crafted document, enabling remote arbitrary code execution or application crash. Apple’s advisory notes updates addressing the issue; r...