Apple iOS vulnerabilities

CVE-2017-6998 [HIGH] CVE-2017-6998: iOS 10.3.2 Apple Security Update: About the security content of iOS 10.3.2 Product: iOS Version: 10.3.2 CVE: CVE-2017-6998 Component: AVEVideoEncoder Impact: An application may be able to gain kernel privileges Description: Multiple memory corruption issues were addressed with improved memory handling.

CVE-2017-6995 [HIGH] CVE-2017-6995: iOS 10.3.2 Apple Security Update: About the security content of iOS 10.3.2 Product: iOS Version: 10.3.2 CVE: CVE-2017-6995 Component: AVEVideoEncoder Impact: An application may be able to gain kernel privileges Description: Multiple memory corruption issues were addressed with improved memory handling.

CVE-2017-6996 [HIGH] CVE-2017-6996: iOS 10.3.2 Apple Security Update: About the security content of iOS 10.3.2 Product: iOS Version: 10.3.2 CVE: CVE-2017-6996 Component: AVEVideoEncoder Impact: An application may be able to gain kernel privileges Description: Multiple memory corruption issues were addressed with improved memory handling.

CVE-2017-6994 [HIGH] CVE-2017-6994: iOS 10.3.2 Apple Security Update: About the security content of iOS 10.3.2 Product: iOS Version: 10.3.2 CVE: CVE-2017-6994 Component: AVEVideoEncoder Impact: An application may be able to gain kernel privileges Description: Multiple memory corruption issues were addressed with improved memory handling.

CVE-2017-6989 [HIGH] CVE-2017-6989: iOS 10.3.2 Apple Security Update: About the security content of iOS 10.3.2 Product: iOS Version: 10.3.2 CVE: CVE-2017-6989 Component: AVEVideoEncoder Impact: An application may be able to gain kernel privileges Description: Multiple memory corruption issues were addressed with improved memory handling.

CVE-2016-4669 [HIGH] CVE-2016-4669: iOS 10.1 Apple Security Update: About the security content of iOS 10.1 Product: iOS Version: 10.1 CVE: CVE-2016-4669 Component: Kernel Impact: A local user may be able to cause an unexpected system termination or arbitrary code execution in the kernel Description: Multiple input validation issues existed in MIG generated code. These issues were addressed through improved validation.

CVE-2017-2364 [MEDIUM] CVE-2017-2364: iOS 10.3 Apple Security Update: About the security content of iOS 10.3 Product: iOS Version: 10.3 CVE: CVE-2017-2364 Component: WebKit Impact: Processing maliciously crafted web content may exfiltrate data cross-origin Description: Multiple validation issues existed in the handling of page loading. This issue was addressed through improved logic.

CVE-2016-1828 [HIGH] CVE-2016-1828: iOS 9.3.2 Apple Security Update: About the security content of iOS 9.3.2 Product: iOS Version: 9.3.2 CVE: CVE-2016-1828 Component: CVE-ID Impact: A local attacker may be able to cause unexpected application termination or arbitrary code execution Description: A memory corruption issue was addressed through improved input validation.

CVE-2016-1827 [HIGH] CVE-2016-1827: iOS 9.3.2 Apple Security Update: About the security content of iOS 9.3.2 Product: iOS Version: 9.3.2 CVE: CVE-2016-1827 Component: CVE-ID Impact: A local attacker may be able to cause unexpected application termination or arbitrary code execution Description: A memory corruption issue was addressed through improved input validation.

CVE-2017-2367 [MEDIUM] CVE-2017-2367: iOS 10.3 Apple Security Update: About the security content of iOS 10.3 Product: iOS Version: 10.3 CVE: CVE-2017-2367 Component: WebKit Impact: A malicious website may exfiltrate data cross-origin Description: A validation issue existed in the handling of page loading. This issue was addressed through improved logic.

CVE-2017-2479 [MEDIUM] CVE-2017-2479: iOS 10.3 Apple Security Update: About the security content of iOS 10.3 Product: iOS Version: 10.3 CVE: CVE-2017-2479 Component: WebKit Impact: Processing maliciously crafted web content may exfiltrate data cross-origin Description: A validation issue existed in element handling. This issue was addressed through improved validation.

CVE-2017-2371 [MEDIUM] CVE-2017-2371: iOS 10.2.1 Apple Security Update: About the security content of iOS 10.2.1 Product: iOS Version: 10.2.1 CVE: CVE-2017-2371 Component: WebKit Impact: A malicious website can open popups Description: An issue existed in the handling of blocking popups. This was addressed through improved input validation.

CVE-2017-7089 [MEDIUM] CVE-2017-7089: iOS 11 Apple Security Update: About the security content of iOS 11 Product: iOS Version: 11 CVE: CVE-2017-7089 Component: WebKit Impact: Processing maliciously crafted web content may lead to universal cross site scripting Description: A logic issue existed in the handling of the parent-tab. This issue was addressed with improved state management.

CVE-2016-1803 [HIGH] CVE-2016-1803: iOS 9.3.2 Apple Security Update: About the security content of iOS 9.3.2 Product: iOS Version: 9.3.2 CVE: CVE-2016-1803 Component: CVE-ID

CVE-2016-1755 [HIGH] CVE-2016-1755: iOS 9.3 Apple Security Update: About the security content of iOS 9.3 Product: iOS Version: 9.3 CVE: CVE-2016-1755 Component: CVE-ID

CVE-2016-1813 [HIGH] CVE-2016-1813: iOS 9.3.2 Apple Security Update: About the security content of iOS 9.3.2 Product: iOS Version: 9.3.2 CVE: CVE-2016-1813 Component: CVE-ID

CVE-2019-6205 [HIGH] CWE-787 CVE-2019-6205: A memory corruption issue was addressed with improved lock state checking. This issue is fixed in iO A memory corruption issue was addressed with improved lock state checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2. A malicious application may cause unexpected changes in memory shared between processes.

CVE-2019-8514 [HIGH] CVE-2019-8514: A logic issue was addressed with improved state management. This issue is fixed in iOS 12.2, macOS M A logic issue was addressed with improved state management. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. An application may be able to gain elevated privileges.

CVE-2017-2442 [MEDIUM] CVE-2017-2442: iOS 10.3 Apple Security Update: About the security content of iOS 10.3 Product: iOS Version: 10.3 CVE: CVE-2017-2442 Component: WebKit JavaScript Bindings Impact: Processing maliciously crafted web content may exfiltrate data cross-origin Description: Multiple validation issues existed in the handling of page loading. This issue was addressed through improved logic.

CVE-2019-8717 [HIGH] CVE-2019-8717: iOS 13 Apple Security Update: About the security content of iOS 13 Product: iOS Version: 13 CVE: CVE-2019-8717 Component: Kernel Impact: An application may be able to execute arbitrary code with kernel privileges Description: A memory corruption issue was addressed with improved memory handling.