| Max CVSS | 10.0 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2017-6976 | 4.3 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "Sandbox Profiles" component. It allows attackers to bypass intended access restrictions (for iCloud user records) via a crafted app.
|
03-10-2019 - 00:03 | 03-04-2018 - 06:29 | |
| CVE-2017-2376 | 5.0 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "Safari" component. It allows remote attackers to spoof the address bar by leveraging text input during the loading
|
03-10-2019 - 00:03 | 02-04-2017 - 01:59 | |
| CVE-2017-2367 | 4.3 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and o
|
03-10-2019 - 00:03 | 02-04-2017 - 01:59 | |
| CVE-2017-2417 | 4.3 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "CoreGraphics" component. It allows remote attacker
|
03-10-2019 - 00:03 | 02-04-2017 - 01:59 | |
| CVE-2017-2404 | 5.0 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "Quick Look" component. It allows remote attackers to trigger telephone calls to arbitrary numbers via a tel: URL in a PDF document, as exploited i
|
03-10-2019 - 00:03 | 02-04-2017 - 01:59 | |
| CVE-2017-2453 | 4.3 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "Safari" component. It allows remote attackers to spoof FaceTime prompts in the user interface via a crafted web si
|
03-10-2019 - 00:03 | 02-04-2017 - 01:59 | |
| CVE-2017-2474 | 9.3 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Kernel" component. An off-by-one error allows atta
|
03-10-2019 - 00:03 | 02-04-2017 - 01:59 | |
| CVE-2017-2446 | 6.8 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code via a crafte
|
03-10-2019 - 00:03 | 02-04-2017 - 01:59 | |
| CVE-2017-2461 | 5.0 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "CoreText" component. It allows remote attackers to
|
03-10-2019 - 00:03 | 02-04-2017 - 01:59 | |
| CVE-2017-2386 | 4.3 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and o
|
03-10-2019 - 00:03 | 02-04-2017 - 01:59 | |
| CVE-2017-2412 | 4.3 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "iTunes Store" component. It allows man-in-the-middle attackers to modify the client-server data stream to iTunes sandbox web services by leveragin
|
03-10-2019 - 00:03 | 02-04-2017 - 01:59 | |
| CVE-2017-2390 | 2.1 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves symlink mishandling in the "libarchive" component. It a
|
03-10-2019 - 00:03 | 02-04-2017 - 01:59 | |
| CVE-2017-2486 | 4.3 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to spoof the address bar via a crafted web site.
|
03-10-2019 - 00:03 | 02-04-2017 - 01:59 | |
| CVE-2017-2389 | 5.8 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "Safari" component. It allows remote attackers to spoof an HTTP authentication sheet or cause a denial of service v
|
03-10-2019 - 00:03 | 02-04-2017 - 01:59 | |
| CVE-2017-2399 | 2.1 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "Pasteboard" component. It allows physically proximate attackers to read the pasteboard by leveraging the use of an encryption key derived only fro
|
03-10-2019 - 00:03 | 02-04-2017 - 01:59 | |
| CVE-2017-2423 | 7.5 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. The issue involves the "Security" component. It allows remote attackers to bypass intended access restrictions by leveraging a successfu
|
03-10-2019 - 00:03 | 02-04-2017 - 01:59 | |
| CVE-2017-2419 | 5.0 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass a Content Security Policy protection mechanism via unspeci
|
03-10-2019 - 00:03 | 02-04-2017 - 01:59 | |
| CVE-2017-2484 | 5.0 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "Phone" component. It allows attackers to trigger telephone calls to arbitrary numbers via a third-party app.
|
03-10-2019 - 00:03 | 02-04-2017 - 01:59 | |
| CVE-2017-2475 | 4.3 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS (UXSS) attack
|
25-03-2019 - 17:15 | 02-04-2017 - 01:59 | |
| CVE-2017-2476 | 6.8 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a d
|
25-03-2019 - 17:15 | 02-04-2017 - 01:59 | |
| CVE-2017-2479 | 4.3 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. iCloud before 6.2 on Windows is affected. iTunes before 12.6 on Windows is affected. tvOS before 10.2 is affected. The issue involves the
|
19-03-2019 - 13:40 | 02-04-2017 - 01:59 | |
| CVE-2017-2463 | 6.8 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. iCloud before 6.2 on Windows is affected. iTunes before 12.6 on Windows is affected. tvOS before 10.2 is affected. The issue involves the
|
19-03-2019 - 13:38 | 02-04-2017 - 01:59 | |
| CVE-2017-2406 | 6.8 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "FontParser" component. It allows remote attackers
|
08-03-2019 - 16:06 | 02-04-2017 - 01:59 | |
| CVE-2017-2379 | 6.8 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Carbon" component. It allows remote attackers to e
|
08-03-2019 - 16:06 | 02-04-2017 - 01:59 | |
| CVE-2017-2458 | 9.3 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Keyboards" component. A buffer overflow allows att
|
08-03-2019 - 16:06 | 02-04-2017 - 01:59 | |
| CVE-2017-2482 | 9.3 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Kernel" component. A buffer overflow allows attack
|
08-03-2019 - 16:06 | 02-04-2017 - 01:59 | |
| CVE-2017-2448 | 4.3 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. The issue involves the "Keychain" component. It allows man-in-the-middle attackers to bypass an iCloud Key
|
08-03-2019 - 16:06 | 02-04-2017 - 01:59 | |
| CVE-2017-2466 | 6.8 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a d
|
08-03-2019 - 16:06 | 02-04-2017 - 01:59 | |
| CVE-2017-2481 | 6.8 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a d
|
08-03-2019 - 16:06 | 02-04-2017 - 01:59 | |
| CVE-2017-2460 | 6.8 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a d
|
08-03-2019 - 16:06 | 02-04-2017 - 01:59 | |
| CVE-2017-2432 | 6.8 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "ImageIO" component. It allows remote attackers to
|
08-03-2019 - 16:06 | 02-04-2017 - 01:59 | |
| CVE-2017-2455 | 6.8 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a d
|
08-03-2019 - 16:06 | 02-04-2017 - 01:59 | |
| CVE-2017-2485 | 9.3 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Security" component. It allows remote attackers to
|
08-03-2019 - 16:06 | 02-04-2017 - 01:59 | |
| CVE-2017-2465 | 6.8 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a d
|
08-03-2019 - 16:06 | 02-04-2017 - 01:59 | |
| CVE-2017-2395 | 6.8 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a d
|
08-03-2019 - 16:06 | 02-04-2017 - 01:59 | |
| CVE-2017-2415 | 6.8 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to exe
|
08-03-2019 - 16:06 | 02-04-2017 - 01:59 | |
| CVE-2017-2473 | 9.3 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Kernel" component. It allows attackers to execute
|
08-03-2019 - 16:06 | 02-04-2017 - 01:59 | |
| CVE-2017-2447 | 5.8 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to obtain sensitive information or cau
|
08-03-2019 - 16:06 | 02-04-2017 - 01:59 | |
| CVE-2017-2394 | 6.8 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a d
|
08-03-2019 - 16:06 | 02-04-2017 - 01:59 | |
| CVE-2017-2493 | 4.3 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. iCloud before 6.2 on Windows is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attack
|
08-03-2019 - 16:06 | 03-04-2018 - 06:29 | |
| CVE-2017-2470 | 6.8 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a d
|
08-03-2019 - 16:06 | 02-04-2017 - 01:59 | |
| CVE-2017-2450 | 5.8 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "CoreText" component. It allows remote attackers to
|
08-03-2019 - 16:06 | 02-04-2017 - 01:59 | |
| CVE-2017-2396 | 6.8 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a d
|
08-03-2019 - 16:06 | 02-04-2017 - 01:59 | |
| CVE-2017-2439 | 5.8 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "FontParser" component. It allows remote attackers
|
08-03-2019 - 16:06 | 02-04-2017 - 01:59 | |
| CVE-2017-2468 | 6.8 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a d
|
08-03-2019 - 16:06 | 02-04-2017 - 01:59 | |
| CVE-2017-2459 | 6.8 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a d
|
08-03-2019 - 16:06 | 02-04-2017 - 01:59 | |
| CVE-2017-2472 | 9.3 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Kernel" component. It allows attackers to execute
|
08-03-2019 - 16:06 | 02-04-2017 - 01:59 | |
| CVE-2017-2451 | 9.3 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Security" component. It allows attackers to execut
|
08-03-2019 - 16:06 | 02-04-2017 - 01:59 | |
| CVE-2017-2469 | 6.8 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a d
|
08-03-2019 - 16:06 | 02-04-2017 - 01:59 | |
| CVE-2017-2441 | 9.3 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "libc++abi" component. A use-after-free vulnerabili
|
08-03-2019 - 16:06 | 02-04-2017 - 01:59 | |
| CVE-2017-2407 | 6.8 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "FontParser" component. It allows remote attackers
|
08-03-2019 - 16:06 | 02-04-2017 - 01:59 | |
| CVE-2017-2444 | 6.8 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "CoreGraphics" component. It allows remote attackers
|
08-03-2019 - 16:06 | 02-04-2017 - 01:59 | |
| CVE-2017-2464 | 6.8 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a d
|
08-03-2019 - 16:06 | 02-04-2017 - 01:59 | |
| CVE-2017-2430 | 6.8 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Audio" component. It allows remote attackers to ex
|
08-03-2019 - 16:06 | 02-04-2017 - 01:59 | |
| CVE-2017-2454 | 6.8 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a d
|
08-03-2019 - 16:06 | 02-04-2017 - 01:59 | |
| CVE-2017-2487 | 6.8 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "FontParser" component. It allows remote attackers
|
08-03-2019 - 16:06 | 02-04-2017 - 01:59 | |
| CVE-2017-2467 | 6.8 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "ImageIO" component. It allows remote attackers to
|
08-03-2019 - 16:06 | 02-04-2017 - 01:59 | |
| CVE-2017-2440 | 9.3 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Kernel" component. It allows attackers to execute
|
08-03-2019 - 16:06 | 02-04-2017 - 01:59 | |
| CVE-2017-2483 | 9.3 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Kernel" component. A buffer overflow allows attack
|
08-03-2019 - 16:06 | 02-04-2017 - 01:59 | |
| CVE-2017-2445 | 4.3 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS (UXSS) attack
|
08-03-2019 - 16:06 | 02-04-2017 - 01:59 | |
| CVE-2017-2492 | 4.3 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "JavaScriptCore" component. It allows remote attackers to conduct Universal XSS (UXSS
|
08-03-2019 - 16:06 | 03-04-2018 - 06:29 | |
| CVE-2017-2428 | 7.5 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves nghttp2 before 1.17.0 in the "HTTPProtocol" component.
|
08-03-2019 - 16:06 | 02-04-2017 - 01:59 | |
| CVE-2017-2478 | 7.6 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Kernel" component. A race condition allows attacke
|
08-03-2019 - 16:06 | 02-04-2017 - 01:59 | |
| CVE-2017-2456 | 7.6 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Kernel" component. A race condition allows attacke
|
08-03-2019 - 16:06 | 02-04-2017 - 01:59 | |
| CVE-2017-2490 | 9.3 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Kernel" component. It allows attackers to execute
|
08-03-2019 - 16:06 | 02-04-2017 - 01:59 | |
| CVE-2017-2462 | 6.8 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Audio" component. It allows remote attackers to ex
|
08-03-2019 - 16:06 | 02-04-2017 - 01:59 | |
| CVE-2017-2435 | 6.8 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "CoreText" component. It allows remote attackers to
|
08-03-2019 - 16:06 | 02-04-2017 - 01:59 | |
| CVE-2017-2416 | 6.8 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "ImageIO" component. It allows remote attackers to
|
08-03-2019 - 16:06 | 02-04-2017 - 01:59 | |
| CVE-2017-2401 | 9.3 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Kernel" component. It allows attackers to execute
|
08-03-2019 - 16:06 | 02-04-2017 - 01:59 | |
| CVE-2017-2424 | 4.3 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves mishandling of OpenGL shaders in the "WebKit" component. It allows remote attackers to obtain sensitive information fro
|
19-09-2017 - 01:36 | 02-04-2017 - 01:59 | |
| CVE-2017-2442 | 4.3 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "WebKit JavaScript Bindings" component. It allows remote attackers to bypass the Same Origin Policy and obtain sens
|
16-08-2017 - 01:29 | 02-04-2017 - 01:59 | |
| CVE-2017-2471 | 6.8 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. watchOS before 3.2 is affected. The issue involves the "WebKit" component. A use-after-free vulnerability allows remote attackers to execu
|
16-08-2017 - 01:29 | 02-04-2017 - 01:59 | |
| CVE-2017-2480 | 4.3 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. iCloud before 6.2 on Windows is affected. iTunes before 12.6 on Windows is affected. tvOS before 10.2 is affected. The issue involves the
|
16-08-2017 - 01:29 | 02-04-2017 - 01:59 | |
| CVE-2017-2457 | 6.8 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corru
|
16-08-2017 - 01:29 | 02-04-2017 - 01:59 | |
| CVE-2017-2452 | 2.1 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "Siri" component. It allows physically proximate attackers to read text messages on the lock screen via unspecified vectors.
|
12-07-2017 - 01:29 | 02-04-2017 - 01:59 | |
| CVE-2017-2400 | 5.0 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "SafariViewController" component. It allows attackers to obtain sensitive information by leveraging the SafariViewController's incorrect synchroniz
|
12-07-2017 - 01:29 | 02-04-2017 - 01:59 | |
| CVE-2017-2434 | 10.0 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "HomeKit" component. It allows attackers to have an unspecified impact by leveraging the presence of Home Control on Control Center.
|
12-07-2017 - 01:29 | 02-04-2017 - 01:59 | |
| CVE-2017-2414 | 5.0 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "DataAccess" component. It allows remote attackers to access Exchange traffic in opportunistic circumstances by leveraging a mistake in typing an e
|
12-07-2017 - 01:29 | 02-04-2017 - 01:59 | |
| CVE-2017-2384 | 2.1 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves mishandling of deletion within the SQLite subsystem of the "Safari" component. It allows local users to identify the web-site visits that occurred in P
|
12-07-2017 - 01:29 | 02-04-2017 - 01:59 | |
| CVE-2017-2398 | 9.3 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of se
|
12-07-2017 - 01:29 | 02-04-2017 - 01:59 | |
| CVE-2017-2433 | 6.8 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corru
|
12-07-2017 - 01:29 | 02-04-2017 - 01:59 | |
| CVE-2017-2377 | 5.0 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "WebKit Web Inspector" component. It allows attackers to cause a denial of service (memory corruption and applicati
|
12-07-2017 - 01:29 | 02-04-2017 - 01:59 | |
| CVE-2017-2378 | 6.8 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves bookmark creation in the "WebKit" component. It allows remote attackers to execute arbitrary code or spoof a bookmark b
|
12-07-2017 - 01:29 | 02-04-2017 - 01:59 | |
| CVE-2017-2393 | 4.3 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "Safari Reader" component. It allows remote attackers to conduct Universal XSS (UXSS) attacks via a crafted web site.
|
12-07-2017 - 01:29 | 02-04-2017 - 01:59 | |
| CVE-2017-2405 | 6.8 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. The issue involves the "WebKit Web Inspector" component. It allows remote attackers to execute arbitrary code or cause a denial of service
|
12-07-2017 - 01:29 | 02-04-2017 - 01:59 | |
| CVE-2017-2397 | 2.1 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "Accounts" component. It allows physically proximate attackers to discover an Apple ID by reading an iCloud authentication prompt on the lock scree
|
12-07-2017 - 01:29 | 02-04-2017 - 01:59 | |
| CVE-2017-2380 | 5.0 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the Simple Certificate Enrollment Protocol (SCEP) implementation in the "Profiles" component. It allows remote attackers to bypass cryptographic pro
|
22-06-2017 - 01:29 | 02-04-2017 - 01:59 |