CVE-2017-7002 – Apple Safari WebSQL matchinfo Type Confusion Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2017-7002
30 May 2017 — An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. The issue involves the "SQLite" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. Se ha descubierto un problema en ciertos productos Apple. Se han visto afectadas las versiones de iOS anteriores a la 10.3.2 y las versiones de macOS anteriores a la 10.12.5. • http://www.securityfocus.com/bid/98773 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVE-2017-2493 – WebKit HTMLObjectElement::updateWidget Universal XSS
https://notcve.org/view.php?id=CVE-2017-2493
25 May 2017 — An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. iCloud before 6.2 on Windows is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted elements on a web site. Se ha descubierto un problema en algunos productos Apple. • https://packetstorm.news/files/id/142660 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVE-2017-2522 – Apple macOS/iOS - Memory Corruption Due to Bad Bounds Checking in NSCharacterSet Coding for NSKeyedUnarchiver
https://notcve.org/view.php?id=CVE-2017-2522
22 May 2017 — An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "CoreFoundation" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted data. Fue encontrado un problema en algunos productos de Apple. iOS anteriores a la versión 10.3.2 se ven afectados. macOS anterior a la versió... • https://packetstorm.news/files/id/142648 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVE-2017-6994 – Apple iOS < 10.3.1 - Kernel
https://notcve.org/view.php?id=CVE-2017-6994
22 May 2017 — An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "AVEVideoEncoder" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. Se ha detectado un problema en ciertos productos de Apple. iOS versión anterior a 10.3.2 se ve afectado. TVOS versión anterior a 10.2.1 se ve afectado. • https://www.exploit-db.com/exploits/42555 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVE-2017-2523 – Apple macOS/iOS - NSUnarchiver Heap Corruption Due to Lack of Bounds Checking in [NSBuiltinCharacterSet initWithCoder:]
https://notcve.org/view.php?id=CVE-2017-2523
22 May 2017 — An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "Foundation" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted data. Fue encontrado un problema en algunos productos de Apple. iOS anteriores a la versión 10.3.2 se ven afectados. macOS anterior a la versión 10... • https://packetstorm.news/files/id/142649 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVE-2017-6996 – Apple iOS < 10.3.1 - Kernel
https://notcve.org/view.php?id=CVE-2017-6996
22 May 2017 — An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "AVEVideoEncoder" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. Se ha detectado un problema en ciertos productos de Apple. iOS versión anterior a 10.3.2 se ve afectado. TVOS versión anterior a 10.2.1 se ve afectado. • https://www.exploit-db.com/exploits/42555 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVE-2017-6998 – Apple iOS < 10.3.1 - Kernel
https://notcve.org/view.php?id=CVE-2017-6998
22 May 2017 — An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "AVEVideoEncoder" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. Se ha detectado un problema en ciertos productos de Apple. iOS versión anterior a 10.3.2 se ve afectado. TVOS versión anterior a 10.2.1 se ve afectado. • https://www.exploit-db.com/exploits/42555 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVE-2017-6999 – Apple iOS < 10.3.1 - Kernel
https://notcve.org/view.php?id=CVE-2017-6999
22 May 2017 — An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "AVEVideoEncoder" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. Se ha encontrado un problema en ciertos productos de Apple. iOS versión anterior a 10.3.2 se ve afectado. TVOS versión anterior a 10.2.1 se ve afectado. • https://www.exploit-db.com/exploits/42555 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVE-2017-6997 – Apple iOS < 10.3.1 - Kernel
https://notcve.org/view.php?id=CVE-2017-6997
22 May 2017 — An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "AVEVideoEncoder" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. Se ha detectado un problema en ciertos productos de Apple. iOS versión anterior a 10.3.2 se ve afectado. TVOS versión anterior a 10.2.1 se ve afectado. • https://www.exploit-db.com/exploits/42555 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVE-2017-6995 – Apple iOS < 10.3.1 - Kernel
https://notcve.org/view.php?id=CVE-2017-6995
22 May 2017 — An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "AVEVideoEncoder" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. Se ha detectado un problema en ciertos productos de Apple. iOS versión anterior a 10.3.2 se ve afectado. TVOS versión anterior a 10.2.1 se ve afectado. • https://www.exploit-db.com/exploits/42555 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •