Apple

watchOS

1713 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2016-4607

  • EPSS 3.06%
  • Veröffentlicht 22.07.2016 02:59:30
  • Zuletzt bearbeitet 12.04.2025 10:46:40

libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denial of service (memory corruption) or possibly ...

7.8

CVE-2016-4594

  • EPSS 0.21%
  • Veröffentlicht 22.07.2016 02:59:17
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The Sandbox Profiles component in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows attackers to access the process list via a crafted app that makes an API call.

7.8

CVE-2016-4582

  • EPSS 0.12%
  • Veröffentlicht 22.07.2016 02:59:04
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The kernel in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-...

5.5

CVE-2016-1865

  • EPSS 0.08%
  • Veröffentlicht 22.07.2016 02:59:02
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The kernel in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows local users to cause a denial of service (NULL pointer dereference) via unspecified vectors.

7.8

CVE-2016-1863

Exploit
  • EPSS 0.24%
  • Veröffentlicht 22.07.2016 02:59:01
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The kernel in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-...

9.8

CVE-2015-7988

  • EPSS 2.6%
  • Veröffentlicht 26.06.2016 01:59:01
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The handle_regservice_request function in mDNSResponder before 625.41.2 allows remote attackers to execute arbitrary code or cause a denial of service (NULL pointer dereference) via unspecified vectors.

9.8

CVE-2015-7987

  • EPSS 3.09%
  • Veröffentlicht 26.06.2016 01:59:00
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Multiple buffer overflows in mDNSResponder before 625.41.2 allow remote attackers to read or write to out-of-bounds memory locations via vectors involving the (1) GetValueForIPv4Addr, (2) GetValueForMACAddr, (3) rfc3110_import, or (4) CopyNSEC3Resour...

10

CVE-2016-4448

  • EPSS 1.2%
  • Veröffentlicht 09.06.2016 16:59:06
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Format string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact via format string specifiers in unknown vectors.

7.5

CVE-2016-4447

Exploit
  • EPSS 3.33%
  • Veröffentlicht 09.06.2016 16:59:05
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The xmlParseElementDecl function in parser.c in libxml2 before 2.9.4 allows context-dependent attackers to cause a denial of service (heap-based buffer underread and application crash) via a crafted file, involving xmlParseName.

8.8

CVE-2016-1847

  • EPSS 0.86%
  • Veröffentlicht 20.05.2016 11:00:00
  • Zuletzt bearbeitet 12.04.2025 10:46:40

OpenGL, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.