Apple

watchOS

1844 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.3

CVE-2016-4737

  • EPSS 2.87%
  • Veröffentlicht 25.09.2016 10:59:40
  • Zuletzt bearbeitet 06.05.2026 22:30:45

WebKit in Apple iOS before 10, Safari before 10, tvOS before 10, and watchOS before 3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.

9.3

CVE-2016-4726

  • EPSS 1.57%
  • Veröffentlicht 25.09.2016 10:59:30
  • Zuletzt bearbeitet 06.05.2026 22:30:45

IOAcceleratorFamily in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

8.1

CVE-2016-4725

  • EPSS 1.5%
  • Veröffentlicht 25.09.2016 10:59:29
  • Zuletzt bearbeitet 06.05.2026 22:30:45

IOAcceleratorFamily in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (memory corruption) via a crafted web site.

6.5

CVE-2016-4718

  • EPSS 2.58%
  • Veröffentlicht 25.09.2016 10:59:25
  • Zuletzt bearbeitet 06.05.2026 22:30:45

Buffer overflow in FontParser in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows remote attackers to obtain sensitive information from process memory via a crafted font file.

9.3

CVE-2016-4712

  • EPSS 1.63%
  • Veröffentlicht 25.09.2016 10:59:19
  • Zuletzt bearbeitet 06.05.2026 22:30:45

CoreCrypto in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows attackers to execute arbitrary code or cause a denial of service (out-of-bounds write) via a crafted app.

6.5

CVE-2016-4708

  • EPSS 3.9%
  • Veröffentlicht 25.09.2016 10:59:15
  • Zuletzt bearbeitet 06.05.2026 22:30:45

CFNetwork in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 misparses the Set-Cookie header, which allows remote attackers to obtain sensitive information via a crafted HTTP response.

10

CVE-2016-4702

  • EPSS 5.76%
  • Veröffentlicht 25.09.2016 10:59:11
  • Zuletzt bearbeitet 06.05.2026 22:30:45

Audio in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

10

CVE-2016-4658

  • EPSS 8.56%
  • Veröffentlicht 25.09.2016 10:59:02
  • Zuletzt bearbeitet 06.05.2026 22:30:45

xpointer.c in libxml2 before 2.9.5 (as used in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3, and other products) does not forbid namespace nodes in XPointer ranges, which allows remote attackers to execute arbitrary co...

5.5

CVE-2016-4719

  • EPSS 0.98%
  • Veröffentlicht 18.09.2016 22:59:04
  • Zuletzt bearbeitet 06.05.2026 22:30:45

The GeoServices component in Apple iOS before 10 and watchOS before 3 does not properly restrict access to PlaceData information, which allows attackers to discover physical locations via a crafted application.

8.8

CVE-2016-5131

  • EPSS 2.25%
  • Veröffentlicht 23.07.2016 19:59:13
  • Zuletzt bearbeitet 06.05.2026 22:30:45

Use-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the XPointer range-to function.