| Max CVSS | 7.2 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2016-4582 | 7.2 |
The kernel in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-
|
25-03-2019 - 17:34 | 22-07-2016 - 02:59 | |
| CVE-2016-4637 | 6.8 |
CoreGraphics in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted BMP image.
|
25-03-2019 - 16:53 | 22-07-2016 - 02:59 | |
| CVE-2016-4632 | 5.0 |
ImageIO in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors.
|
25-03-2019 - 16:52 | 22-07-2016 - 02:59 | |
| CVE-2016-4626 | 7.2 |
IOHIDFamily in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows local users to gain privileges or cause a denial of service (NULL pointer dereference) via unspecified vectors.
|
25-03-2019 - 16:52 | 22-07-2016 - 02:59 | |
| CVE-2016-4631 | 6.8 |
ImageIO in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted TIFF file.
|
25-03-2019 - 16:52 | 22-07-2016 - 02:59 | |
| CVE-2016-1863 | 7.2 |
The kernel in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-
|
20-03-2019 - 15:20 | 22-07-2016 - 02:59 | |
| CVE-2016-1865 | 4.9 |
The kernel in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows local users to cause a denial of service (NULL pointer dereference) via unspecified vectors.
|
20-03-2019 - 15:17 | 22-07-2016 - 02:59 | |
| CVE-2016-4594 | 6.8 |
The Sandbox Profiles component in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows attackers to access the process list via a crafted app that makes an API call.
|
20-03-2019 - 13:41 | 22-07-2016 - 02:59 | |
| CVE-2016-4627 | 7.2 |
IOAcceleratorFamily in Apple iOS before 9.3.3, tvOS before 9.2.2, and watchOS before 2.2.2 allows local users to gain privileges or cause a denial of service (NULL pointer dereference) via unspecified vectors.
|
19-03-2019 - 18:59 | 22-07-2016 - 02:59 | |
| CVE-2016-4587 | 4.3 |
WebKit in Apple iOS before 9.3.3 and tvOS before 9.2.2 allows remote attackers to obtain sensitive information from uninitialized process memory via a crafted web site.
|
19-03-2019 - 12:18 | 22-07-2016 - 02:59 | |
| CVE-2016-4635 | 3.5 |
FaceTime in Apple iOS before 9.3.3 and OS X before 10.11.6 allows man-in-the-middle attackers to spoof relayed-call termination, and obtain sensitive audio information in opportunistic circumstances, via unspecified vectors.
|
01-09-2017 - 01:29 | 22-07-2016 - 02:59 | |
| CVE-2016-4603 | 4.3 |
Web Media in Apple iOS before 9.3.3 allows attackers to bypass the Private Browsing protection mechanism and obtain sensitive video URL information by leveraging Safari View Controller misbehavior.
|
01-09-2017 - 01:29 | 22-07-2016 - 02:59 | |
| CVE-2016-4593 | 2.1 |
The Siri Contacts component in Apple iOS before 9.3.3 allows physically proximate attackers to read arbitrary Contact card information via unspecified vectors.
|
01-09-2017 - 01:29 | 22-07-2016 - 02:59 | |
| CVE-2016-4605 | 7.1 |
Calendar in Apple iOS before 9.3.3 allows remote attackers to cause a denial of service (NULL pointer dereference and device restart) via a crafted invitation.
|
01-09-2017 - 01:29 | 22-07-2016 - 02:59 | |
| CVE-2016-4628 | 4.9 |
IOAcceleratorFamily in Apple iOS before 9.3.3 and watchOS before 2.2.2 allows local users to obtain sensitive information from kernel memory or cause a denial of service (out-of-bounds read) via unspecified vectors.
|
01-09-2017 - 01:29 | 22-07-2016 - 02:59 | |
| CVE-2016-4604 | 5.8 |
Safari in Apple iOS before 9.3.3 allows remote attackers to spoof the displayed URL via an HTTP response specifying redirection to an invalid TCP port number.
|
01-09-2017 - 01:29 | 22-07-2016 - 02:59 | |
| CVE-2016-1864 | 5.0 |
The XSS auditor in WebKit, as used in Apple iOS before 9.3 and Safari before 9.1, does not properly handle redirects in block mode, which allows remote attackers to obtain sensitive information via a crafted URL.
|
01-09-2017 - 01:29 | 19-06-2016 - 20:59 |