| Max CVSS | 10.0 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2016-9842 | 6.8 |
The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.
|
28-08-2024 - 16:07 | 23-05-2017 - 04:29 | |
| CVE-2016-9840 | 6.8 |
inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.
|
16-08-2022 - 13:16 | 23-05-2017 - 04:29 | |
| CVE-2016-9841 | 7.5 |
inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.
|
16-08-2022 - 13:02 | 23-05-2017 - 04:29 | |
| CVE-2016-9843 | 7.5 |
The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation.
|
16-08-2022 - 13:02 | 23-05-2017 - 04:29 | |
| CVE-2017-9233 | 5.0 |
XML External Entity vulnerability in libexpat 2.2.0 and earlier (Expat XML Parser Library) allows attackers to put the parser in an infinite loop using a malformed external entity definition from an external DTD.
|
28-07-2022 - 11:30 | 25-07-2017 - 20:29 | |
| CVE-2017-11103 | 6.8 |
Heimdal before 7.4 allows remote attackers to impersonate services with Orpheus' Lyre attacks because it obtains service-principal names in a way that violates the Kerberos 5 protocol specification. In _krb5_extract_ticket() the KDC-REP service name
|
18-08-2020 - 15:05 | 13-07-2017 - 13:29 | |
| CVE-2017-7086 | 7.8 |
An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is affected. tvOS before 11 is affected. watchOS before 4 is affected. The issue involves the "libc" component. It allows remote attackers to cause a den
|
03-10-2019 - 00:03 | 23-10-2017 - 01:29 | |
| CVE-2017-7078 | 5.0 |
An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is affected. The issue involves the "Mail Drafts" component. It allows remote attackers to obtain sensitive information by reading unintended cleartext t
|
03-10-2019 - 00:03 | 23-10-2017 - 01:29 | |
| CVE-2017-7146 | 5.0 |
An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Security" component. It allows attackers to track users across installs via a crafted app that leverages Keychain data mishandling.
|
03-10-2019 - 00:03 | 23-10-2017 - 01:29 | |
| CVE-2017-7133 | 5.0 |
An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "MobileBackup" component. It allows remote attackers to obtain sensitive cleartext information in opportunistic circumstances by leveraging read acce
|
03-10-2019 - 00:03 | 23-10-2017 - 01:29 | |
| CVE-2017-13806 | 4.3 |
An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Profiles" component. It does not enforce the configuration profile's settings for whether pairings are allowed.
|
03-10-2019 - 00:03 | 03-04-2018 - 06:29 | |
| CVE-2017-10989 | 7.5 |
The getNodeSize function in ext/rtree/rtree.c in SQLite through 3.19.3, as used in GDAL and other products, mishandles undersized RTree blobs in a crafted database, leading to a heap-based buffer over-read or possibly unspecified other impact.
|
03-10-2019 - 00:03 | 07-07-2017 - 12:29 | |
| CVE-2017-0381 | 9.3 |
An information disclosure vulnerability in silk/NLSF_stabilize.c in libopus in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access
|
03-10-2019 - 00:03 | 12-01-2017 - 20:59 | |
| CVE-2017-11121 | 10.0 |
On Broadcom BCM4355C0 Wi-Fi chips 9.44.78.27.0.1.56 and other chips, properly crafted malicious over-the-air Fast Transition frames can potentially trigger internal Wi-Fi firmware heap and/or stack overflows, leading to denial of service or other eff
|
13-03-2019 - 15:22 | 28-09-2017 - 01:29 | |
| CVE-2017-11120 | 10.0 |
On Broadcom BCM4355C0 Wi-Fi chips 9.44.78.27.0.1.56 and other chips, an attacker can craft a malformed RRM neighbor report frame to trigger an internal buffer overflow in the Wi-Fi firmware, aka B-V2017061204.
|
13-03-2019 - 15:16 | 28-09-2017 - 01:29 | |
| CVE-2017-7099 | 6.8 |
An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKi
|
08-03-2019 - 16:06 | 23-10-2017 - 01:29 | |
| CVE-2017-7127 | 9.3 |
An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is affected. iCloud before 7.0 on Windows is affected. tvOS before 11 is affected. watchOS before 4 is affected. The issue involves the "SQLite" componen
|
08-03-2019 - 16:06 | 23-10-2017 - 01:29 | |
| CVE-2017-7108 | 10.0 |
An issue was discovered in certain Apple products. iOS before 11 is affected. tvOS before 11 is affected. watchOS before 4 is affected. The issue involves the "Wi-Fi" component. It might allow remote attackers to execute arbitrary code in a privilege
|
08-03-2019 - 16:06 | 23-10-2017 - 01:29 | |
| CVE-2017-7098 | 6.8 |
An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKi
|
08-03-2019 - 16:06 | 23-10-2017 - 01:29 | |
| CVE-2017-7109 | 4.3 |
An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKi
|
08-03-2019 - 16:06 | 23-10-2017 - 01:29 | |
| CVE-2017-7080 | 5.0 |
An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is affected. tvOS before 11 is affected. watchOS before 4 is affected. The issue involves the "Security" component. It allows remote attackers to bypass
|
08-03-2019 - 16:06 | 23-10-2017 - 01:29 | |
| CVE-2017-7114 | 9.3 |
An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is affected. tvOS before 11 is affected. watchOS before 4 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrar
|
08-03-2019 - 16:06 | 23-10-2017 - 01:29 | |
| CVE-2017-7092 | 6.8 |
An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKi
|
08-03-2019 - 16:06 | 23-10-2017 - 01:29 | |
| CVE-2017-7103 | 7.5 |
An issue was discovered in certain Apple products. iOS before 11 is affected. tvOS before 11 is affected. watchOS before 4 is affected. The issue involves the "Wi-Fi" component. It might allow remote attackers to execute arbitrary code in a privilege
|
08-03-2019 - 16:06 | 23-10-2017 - 01:29 | |
| CVE-2017-7096 | 6.8 |
An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKi
|
08-03-2019 - 16:06 | 23-10-2017 - 01:29 | |
| CVE-2017-7120 | 6.8 |
An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKi
|
08-03-2019 - 16:06 | 23-10-2017 - 01:29 | |
| CVE-2017-7087 | 6.8 |
An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKi
|
08-03-2019 - 16:06 | 23-10-2017 - 01:29 | |
| CVE-2017-7107 | 6.8 |
An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKi
|
08-03-2019 - 16:06 | 23-10-2017 - 01:29 | |
| CVE-2017-7083 | 4.0 |
An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is affected. tvOS before 11 is affected. watchOS before 4 is affected. The issue involves the "CFNetwork Proxies" component. It allows remote attackers t
|
08-03-2019 - 16:06 | 23-10-2017 - 01:29 | |
| CVE-2017-7100 | 6.8 |
An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKi
|
08-03-2019 - 16:06 | 23-10-2017 - 01:29 | |
| CVE-2017-7112 | 10.0 |
An issue was discovered in certain Apple products. iOS before 11 is affected. tvOS before 11 is affected. watchOS before 4 is affected. The issue involves the "Wi-Fi" component. It might allow remote attackers to execute arbitrary code in a privilege
|
08-03-2019 - 16:06 | 23-10-2017 - 01:29 | |
| CVE-2017-7090 | 5.0 |
An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKi
|
08-03-2019 - 16:06 | 23-10-2017 - 01:29 | |
| CVE-2017-7130 | 7.5 |
An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is affected. tvOS before 11 is affected. watchOS before 4 is affected. The issue involves the third-party "SQLite" product. Versions before 3.19.3 allow
|
08-03-2019 - 16:06 | 23-10-2017 - 01:29 | |
| CVE-2017-7116 | 5.0 |
An issue was discovered in certain Apple products. iOS before 11 is affected. tvOS before 11 is affected. watchOS before 4 is affected. The issue involves the "Wi-Fi" component. It might allow remote attackers to read data from kernel memory location
|
08-03-2019 - 16:06 | 23-10-2017 - 01:29 | |
| CVE-2017-7091 | 6.8 |
An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKi
|
08-03-2019 - 16:06 | 23-10-2017 - 01:29 | |
| CVE-2017-7102 | 6.8 |
An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKi
|
08-03-2019 - 16:06 | 23-10-2017 - 01:29 | |
| CVE-2017-7111 | 6.8 |
An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKi
|
08-03-2019 - 16:06 | 23-10-2017 - 01:29 | |
| CVE-2017-7094 | 6.8 |
An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKi
|
08-03-2019 - 16:06 | 23-10-2017 - 01:29 | |
| CVE-2017-7128 | 7.5 |
An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is affected. tvOS before 11 is affected. watchOS before 4 is affected. The issue involves the third-party "SQLite" product. Versions before 3.19.3 allow
|
08-03-2019 - 16:06 | 23-10-2017 - 01:29 | |
| CVE-2017-7081 | 6.8 |
An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKi
|
08-03-2019 - 16:06 | 23-10-2017 - 01:29 | |
| CVE-2017-7105 | 10.0 |
An issue was discovered in certain Apple products. iOS before 11 is affected. tvOS before 11 is affected. watchOS before 4 is affected. The issue involves the "Wi-Fi" component. It might allow remote attackers to execute arbitrary code in a privilege
|
08-03-2019 - 16:06 | 23-10-2017 - 01:29 | |
| CVE-2017-7129 | 7.5 |
An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is affected. tvOS before 11 is affected. watchOS before 4 is affected. The issue involves the third-party "SQLite" product. Versions before 3.19.3 allow
|
08-03-2019 - 16:06 | 23-10-2017 - 01:29 | |
| CVE-2017-7115 | 9.3 |
An issue was discovered in certain Apple products. iOS before 11 is affected. tvOS before 11 is affected. The issue involves the "Wi-Fi" component. It might allow remote attackers to execute arbitrary code in a privileged context or cause a denial of
|
08-03-2019 - 16:06 | 23-10-2017 - 01:29 | |
| CVE-2017-7089 | 4.3 |
An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS (UXSS
|
08-03-2019 - 16:06 | 23-10-2017 - 01:29 | |
| CVE-2017-7110 | 10.0 |
An issue was discovered in certain Apple products. iOS before 11 is affected. tvOS before 11 is affected. watchOS before 4 is affected. The issue involves the "Wi-Fi" component. It might allow remote attackers to execute arbitrary code in a privilege
|
08-03-2019 - 16:06 | 23-10-2017 - 01:29 | |
| CVE-2017-7095 | 6.8 |
An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKi
|
08-03-2019 - 16:06 | 23-10-2017 - 01:29 | |
| CVE-2017-7117 | 6.8 |
An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKi
|
08-03-2019 - 16:06 | 23-10-2017 - 01:29 | |
| CVE-2017-7093 | 6.8 |
An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKi
|
08-03-2019 - 16:06 | 23-10-2017 - 01:29 | |
| CVE-2017-7104 | 6.8 |
An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKi
|
08-03-2019 - 16:06 | 23-10-2017 - 01:29 | |
| CVE-2017-13873 | 4.3 |
An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is affected. tvOS before 11 is affected. watchOS before 4 is affected. The issue involves the "Kernel" component. It allows attackers to obtain sensitive
|
08-03-2019 - 16:06 | 03-04-2018 - 06:29 | |
| CVE-2017-13854 | 9.3 |
An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is affected. tvOS before 11 is affected. watchOS before 4 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrar
|
08-03-2019 - 16:06 | 03-04-2018 - 06:29 | |
| CVE-2017-11122 | 5.0 |
On Broadcom BCM4355C0 Wi-Fi chips 9.44.78.27.0.1.56, an attacker can trigger an information leak due to insufficient length validation, related to ICMPv6 router advertisement offloading.
|
08-03-2019 - 16:06 | 04-10-2017 - 01:29 | |
| CVE-2017-13877 | 4.3 |
An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Sandbox Profiles" component. It allows attackers to determine whether arbitrary files exist via a crafted app.
|
04-05-2018 - 18:26 | 03-04-2018 - 06:29 | |
| CVE-2017-13863 | 4.3 |
An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "APNs" component. It allows man-in-the-middle attackers to track users by leveraging the transmission of client certificates.
|
04-05-2018 - 18:25 | 03-04-2018 - 06:29 | |
| CVE-2017-7075 | 2.1 |
An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Notes" component. It allows local users to obtain sensitive information by reading search results that contain locked-note content.
|
03-05-2018 - 18:59 | 03-04-2018 - 06:29 | |
| CVE-2017-7131 | 4.3 |
An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Bluetooth" component. It allows attackers to obtain sensitive Contact card information via a crafted app.
|
27-10-2017 - 13:43 | 23-10-2017 - 01:29 | |
| CVE-2017-7144 | 4.3 |
An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. The issue involves the "WebKit" component. It allows remote attackers to track Safari Private Browsing users by leveraging cookie mishandling.
|
26-10-2017 - 18:23 | 23-10-2017 - 01:29 | |
| CVE-2017-7148 | 4.3 |
An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Location Framework" component. It allows attackers to obtain sensitive location information via a crafted app that reads the location variable.
|
26-10-2017 - 18:23 | 23-10-2017 - 01:29 | |
| CVE-2017-7145 | 5.0 |
An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Time" component. The "Setting Time Zone" feature mishandles the possibility of using location data.
|
26-10-2017 - 18:22 | 23-10-2017 - 01:29 | |
| CVE-2017-7139 | 2.1 |
An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Phone" component. It allows attackers to obtain sensitive information by leveraging a timing bug to read a secure-content screenshot that occurred d
|
26-10-2017 - 18:20 | 23-10-2017 - 01:29 | |
| CVE-2017-7140 | 5.0 |
An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Keyboard Suggestions" component. It allows attackers to obtain sensitive information by reading keyboard autocorrect suggestions.
|
26-10-2017 - 18:19 | 23-10-2017 - 01:29 | |
| CVE-2017-7118 | 4.3 |
An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Messages" component. It allows remote attackers to cause a denial of service (crash) via a crafted image.
|
26-10-2017 - 15:01 | 23-10-2017 - 01:29 | |
| CVE-2017-7106 | 4.3 |
An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. The issue involves the "WebKit" component. It allows remote attackers to spoof the address bar.
|
26-10-2017 - 14:42 | 23-10-2017 - 01:29 | |
| CVE-2017-7088 | 7.1 |
An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Exchange ActiveSync" component. It allows remote attackers to erase a device in opportunistic circumstances by hijacking a cleartext AutoDiscover V1
|
26-10-2017 - 13:14 | 23-10-2017 - 01:29 | |
| CVE-2017-7085 | 4.3 |
An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. The issue involves the "Safari" component. It allows remote attackers to spoof the address bar.
|
26-10-2017 - 12:57 | 23-10-2017 - 01:29 | |
| CVE-2017-7072 | 4.3 |
An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "iBooks" component. It allows remote attackers to cause a denial of service (persistent outage) via a crafted iBooks file.
|
26-10-2017 - 12:31 | 23-10-2017 - 01:29 | |
| CVE-2017-7097 | 4.3 |
An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Mail MessageUI" component. It allows attackers to cause a denial of service (memory corruption) via a crafted image.
|
25-10-2017 - 20:10 | 23-10-2017 - 01:29 | |
| CVE-2017-1000373 | 6.4 |
The OpenBSD qsort() function is recursive, and not randomized, an attacker can construct a pathological input array of N elements that causes qsort() to deterministically recurse N/4 times. This allows attackers to consume arbitrary amounts of stack
|
24-10-2017 - 01:29 | 19-06-2017 - 16:29 |