Vulnerabilidades do Apple Iphone Os

CVE-2019-8605 Alta · 7.8 KEV Urgente · 70 Exploit público CWE-416 18/12/2019

Apple Multiple Products Use-After-Free Vulnerability

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. A malicious application may be able to execute arbitrary code with system privileges.

CVE-2019-8506 Alta · 8.8 KEV Alta · 64 Exploit público CWE-843 18/12/2019

Apple Multiple Products Type Confusion Vulnerability

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.

CVE-2019-7287 Alta · 7.8 KEV Alta · 55 CWE-787 18/12/2019

Apple iOS Memory Corruption Vulnerability

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4. An application may be able to execute arbitrary code with kernel privileges.

CVE-2019-7286 Alta · 7.8 KEV Alta · 64 Exploit público CWE-787 18/12/2019

Apple Multiple Products Memory Corruption Vulnerability

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental Update. An application may be able to gain elevated privileges.

CVE-2018-4344 Alta · 7.8 KEV Alta · 54 CWE-119 03/04/2019

Apple Multiple Products Memory Corruption Vulnerability

A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.

CVE-2019-6223 Alta · 7.5 KEV Alta · 54 05/03/2019

Apple iOS and macOS Group Facetime Vulnerability

A logic issue existed in the handling of Group FaceTime calls. The issue was addressed with improved state management. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental Update. The initiator of a Group FaceTime call may be able to cause the recipient to answer.

CVE-2019-8906 Média · 4.4 CWE-125 18/02/2019

Out-of-bounds Read em File Project File

do_core_note in readelf.c in libmagic.a in file 5.35 has an out-of-bounds read because memcpy is misused.

CVE-2016-9841 Crítica · 9.8 23/05/2017

inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified…

inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.

CVE-2016-9840 Alta · 8.8 23/05/2017

inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified…

inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.

CVE-2016-4658 Crítica · 9.8 CWE-119 25/09/2016

Nokogiri does not forbid namespace nodes in XPointer ranges

xpointer.c in libxml2 before 2.9.5 (as used in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3, and other products) does not forbid namespace nodes in XPointer ranges, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and memory corruption) via a crafted XML document.

CVE-2016-4657 Alta · 8.8 KEV Urgente · 76 Exploit público CWE-787 25/08/2016

Apple iOS Webkit Memory Corruption Vulnerability

WebKit in Apple iOS before 9.3.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.

CVE-2016-4656 Alta · 7.8 KEV Urgente · 76 Exploit público CWE-787 25/08/2016

Apple iOS Memory Corruption Vulnerability

The kernel in Apple iOS before 9.3.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

CVE-2016-4655 Média · 5.5 KEV Urgente · 73 Exploit público 25/08/2016

Apple iOS Information Disclosure Vulnerability

The kernel in Apple iOS before 9.3.5 allows attackers to obtain sensitive information from memory via a crafted app.

CVE-2016-5131 Alta · 8.8 CWE-416 23/07/2016

Use-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743...

Use-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the XPointer range-to function.

CVE-2016-1839 Média · 5.5 Exploit público CWE-125 20/05/2016

The xmlDictAddString function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X...

The xmlDictAddString function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document.

CVE-2014-4404 Alta · 7.8 KEV Urgente · 76 Exploit público CWE-787 18/09/2014

Apple OS X Heap-Based Buffer Overflow Vulnerability

Heap-based buffer overflow in IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privileged context via an application that provides crafted key-mapping properties.

CVE-2013-0340 Média · 6.8 CWE-611 21/01/2014

expat 2.1.0 and earlier does not properly handle entities expansion unless an application...

expat before version 2.4.0 does not properly handle entities expansion unless an application developer uses the XML_SetEntityDeclHandler function, which allows remote attackers to cause a denial of service (resource consumption), send HTTP requests to intranet servers, or read arbitrary files via a crafted XML document, aka an XML External Entity (XXE) issue. NOTE: it could be argued that because expat already provides the ability to disable external entity expansion, the responsibility for resolving this issue lies with application developers; according to this argument, this entry should be REJECTed, and each affected application would need its own CVE.