Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2016-1778
WebKit in Apple iOS before 9.3 and Safari before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2016-03-21-6', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00005.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-16-200'}, {'name': '1035353', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035353'}, {'name': 'APPLE-SA-2016-03-21-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html'}, {'name': '20160331 WebKitGTK+ Security Advisory WSA-2016-0003', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/537948/100/0/threaded'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206171'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206166'}]
CVE State: PUBLISHED
Explain CVE-2016-1779
WebKit in Apple iOS before 9.3 and Safari before 9.1 allows remote attackers to bypass the Same Origin Policy and obtain physical-location data via a crafted geolocation request.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2016-03-21-6', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00005.html'}, {'name': '1035353', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035353'}, {'name': 'APPLE-SA-2016-03-21-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html'}, {'name': '20160331 WebKitGTK+ Security Advisory WSA-2016-0003', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/537948/100/0/threaded'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206171'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206166'}]
CVE State: PUBLISHED
Explain CVE-2016-1780
WebKit in Apple iOS before 9.3 does not prevent hidden web views from reading orientation and motion data, which allows remote attackers to obtain sensitive information about a device's physical environment via a crafted web site.
Affected Products: n/a
References: [{'name': '1035353', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035353'}, {'name': 'APPLE-SA-2016-03-21-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206166'}]
CVE State: PUBLISHED
Explain CVE-2016-1781
WebKit in Apple iOS before 9.3 and Safari before 9.1 mishandles attachment URLs, which makes it easier for remote web servers to track users via unspecified vectors.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT205635'}, {'name': '1035353', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035353'}, {'name': '20160331 WebKitGTK+ Security Advisory WSA-2016-0003', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/537948/100/0/threaded'}, {'name': 'APPLE-SA-2015-12-08-5', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Dec/msg00003.html'}, {'name': 'APPLE-SA-2015-12-08-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT205639'}]
CVE State: PUBLISHED
Explain CVE-2016-1782
WebKit in Apple iOS before 9.3 and Safari before 9.1 does not properly restrict redirects that specify a TCP port number, which allows remote attackers to bypass intended port restrictions via a crafted web site.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2016-03-21-6', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00005.html'}, {'name': '1035353', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035353'}, {'name': 'APPLE-SA-2016-03-21-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html'}, {'name': '20160331 WebKitGTK+ Security Advisory WSA-2016-0003', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/537948/100/0/threaded'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206171'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206166'}]
CVE State: PUBLISHED
Explain CVE-2016-1783
WebKit in Apple iOS before 9.3, Safari before 9.1, and tvOS before 9.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2016-03-21-6', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00005.html'}, {'name': '1035353', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035353'}, {'name': 'APPLE-SA-2016-03-21-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html'}, {'name': '20160331 WebKitGTK+ Security Advisory WSA-2016-0003', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/537948/100/0/threaded'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206171'}, {'name': 'APPLE-SA-2016-03-21-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206169'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206166'}]
CVE State: PUBLISHED
Explain CVE-2016-1784
The History implementation in WebKit in Apple iOS before 9.3, Safari before 9.1, and tvOS before 9.2 allows remote attackers to cause a denial of service (resource consumption and application crash) via a crafted web site.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2016-03-21-6', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00005.html'}, {'name': '1035353', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035353'}, {'name': 'APPLE-SA-2016-03-21-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206171'}, {'name': 'APPLE-SA-2016-03-21-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206169'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206166'}]
CVE State: PUBLISHED
Explain CVE-2016-1785
The Page Loading implementation in WebKit in Apple iOS before 9.3 and Safari before 9.1 mishandles character encoding during access to cached data, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2016-03-21-6', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00005.html'}, {'name': '1035353', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035353'}, {'name': 'APPLE-SA-2016-03-21-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html'}, {'name': '20160331 WebKitGTK+ Security Advisory WSA-2016-0003', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/537948/100/0/threaded'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206171'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206166'}]
CVE State: PUBLISHED
Explain CVE-2016-1786
The Page Loading implementation in WebKit in Apple iOS before 9.3 and Safari before 9.1 mishandles HTTP responses with a 3xx (aka redirection) status code, which allows remote attackers to spoof the displayed URL, bypass the Same Origin Policy, and obtain sensitive cached information via a crafted web site.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2016-03-21-6', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00005.html'}, {'name': '1035353', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035353'}, {'name': 'APPLE-SA-2016-03-21-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html'}, {'name': '20160331 WebKitGTK+ Security Advisory WSA-2016-0003', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/537948/100/0/threaded'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206171'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206166'}]
CVE State: PUBLISHED
Explain CVE-2016-1787
Wiki Server in Apple OS X Server before 5.1 allows remote attackers to obtain sensitive information from Wiki pages via unspecified vectors.
Affected Products: n/a
References: [{'name': '1035342', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035342'}, {'name': '85054', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/85054'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206173'}, {'name': 'APPLE-SA-2016-03-21-7', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00006.html'}]
CVE State: PUBLISHED
Explain CVE-2016-1788
Messages in Apple iOS before 9.3, OS X before 10.11.4, and watchOS before 2.2 does not properly implement a cryptographic protection mechanism, which allows remote attackers to read message attachments via vectors related to duplicate messages.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2016-03-21-5', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206167'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206168'}, {'name': '1035353', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035353'}, {'name': 'APPLE-SA-2016-03-21-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html'}, {'name': 'APPLE-SA-2016-03-21-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206166'}]
CVE State: PUBLISHED
Explain CVE-2016-1789
Apple iBooks Author before 2.4.1 allows remote attackers to read arbitrary files via an iBooks Author file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/kb/HT206224'}, {'name': 'APPLE-SA-2016-03-31-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00008.html'}]
CVE State: PUBLISHED
Explain CVE-2016-1790
Buffer overflow in the Accessibility component in Apple iOS before 9.3.2 allows attackers to obtain sensitive kernel memory-layout information via a crafted app.
Affected Products: n/a
References: [{'name': '1035890', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035890'}, {'name': 'APPLE-SA-2016-05-16-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00002.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206568'}]
CVE State: PUBLISHED
Explain CVE-2016-1791
The AMD subsystem in Apple OS X before 10.11.5 allows attackers to obtain sensitive kernel memory-layout information via a crafted app.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206567'}, {'name': 'APPLE-SA-2016-05-16-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00004.html'}, {'name': '90696', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/90696'}, {'name': '1035895', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035895'}]
CVE State: PUBLISHED
Explain CVE-2016-1792
The AMD subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206567'}, {'name': 'APPLE-SA-2016-05-16-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00004.html'}, {'name': '90696', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/90696'}, {'name': '1035895', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035895'}]
CVE State: PUBLISHED
Explain CVE-2016-1793
AppleGraphicsDeviceControlClient in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference) via a crafted app.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://bugs.chromium.org/p/project-zero/issues/detail?id=782'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206567'}, {'name': 'APPLE-SA-2016-05-16-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00004.html'}, {'name': '90696', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/90696'}, {'name': '39923', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/39923/'}, {'name': '1035895', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035895'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/137401/OS-X-AppleGraphicsDeviceControl-NULL-Pointer-Dereference.html'}]
CVE State: PUBLISHED
Explain CVE-2016-1794
The AppleGraphicsControlClient::checkArguments method in AppleGraphicsControl in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference) via a crafted app.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206567'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugs.chromium.org/p/project-zero/issues/detail?id=783'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/137402/OS-X-AppleMuxControl.kext-NULL-Pointer-Dereference.html'}, {'name': 'APPLE-SA-2016-05-16-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00004.html'}, {'name': '90696', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/90696'}, {'name': '1035895', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035895'}, {'name': '39922', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/39922/'}]
CVE State: PUBLISHED
Explain CVE-2016-1795
AppleGraphicsPowerManagement in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206567'}, {'name': 'APPLE-SA-2016-05-16-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00004.html'}, {'name': '90696', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/90696'}, {'name': '1035895', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035895'}]
CVE State: PUBLISHED
Explain CVE-2016-1796
Apple Type Services (ATS) in Apple OS X before 10.11.5 allows attackers to obtain sensitive kernel memory-layout information or cause a denial of service (out-of-bounds memory access) via a crafted app.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206567'}, {'name': 'APPLE-SA-2016-05-16-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00004.html'}, {'name': '90696', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/90696'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-16-361'}, {'name': '1035895', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035895'}]
CVE State: PUBLISHED
Explain CVE-2016-1797
Apple Type Services (ATS) in Apple OS X before 10.11.5 allows attackers to bypass intended FontValidator sandbox-policy restrictions and execute arbitrary code in a privileged context via a crafted app.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206567'}, {'name': 'APPLE-SA-2016-05-16-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00004.html'}, {'name': '90696', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/90696'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-16-360'}, {'name': '1035895', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035895'}]
CVE State: PUBLISHED
Explain CVE-2016-1798
Audio in Apple OS X before 10.11.5 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted app.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206567'}, {'name': 'APPLE-SA-2016-05-16-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00004.html'}, {'name': '90696', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/90696'}, {'name': '1035895', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035895'}]
CVE State: PUBLISHED
Explain CVE-2016-1799
Audio in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206567'}, {'name': 'APPLE-SA-2016-05-16-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00004.html'}, {'name': '90696', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/90696'}, {'name': '1035895', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035895'}]
CVE State: PUBLISHED
Explain CVE-2016-1800
Captive Network Assistant in Apple OS X before 10.11.5 mishandles a custom URL scheme, which allows user-assisted remote attackers to execute arbitrary code via unspecified vectors.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206567'}, {'name': 'APPLE-SA-2016-05-16-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00004.html'}, {'name': '90696', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/90696'}, {'name': '1035895', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035895'}]
CVE State: PUBLISHED
Explain CVE-2016-1801
The CFNetwork Proxies subsystem in Apple iOS before 9.3.2, OS X before 10.11.5, and tvOS before 9.2.1 mishandles URLs in http and https requests, which allows remote attackers to obtain sensitive information via unspecified vectors.
Affected Products: n/a
References: [{'name': 'VU#877625', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'https://www.kb.cert.org/vuls/id/877625'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206567'}, {'name': 'APPLE-SA-2016-05-16-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206564'}, {'name': '1035890', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035890'}, {'name': 'APPLE-SA-2016-05-16-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00002.html'}, {'name': '90697', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/90697'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206568'}, {'name': 'APPLE-SA-2016-05-16-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00001.html'}]
CVE State: PUBLISHED
Explain CVE-2016-1802
CCCrypt in CommonCrypto in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 mishandles return values during key-length calculations, which allows attackers to obtain sensitive information via a crafted app.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206567'}, {'name': 'APPLE-SA-2016-05-16-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206566'}, {'name': '90694', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/90694'}, {'name': 'APPLE-SA-2016-05-16-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00003.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206564'}, {'name': '1035890', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035890'}, {'name': 'APPLE-SA-2016-05-16-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00002.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206568'}, {'name': 'APPLE-SA-2016-05-16-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00001.html'}]
CVE State: PUBLISHED
Explain CVE-2016-1803
CoreCapture in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference) via a crafted app.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/137399/OS-X-CoreCaptureResponder-NULL-Pointer-Dereference.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206567'}, {'name': 'APPLE-SA-2016-05-16-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206566'}, {'name': '90694', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/90694'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugs.chromium.org/p/project-zero/issues/detail?id=777'}, {'name': 'APPLE-SA-2016-05-16-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00003.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206564'}, {'name': '1035890', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035890'}, {'name': 'APPLE-SA-2016-05-16-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00002.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-16-339'}, {'name': '39925', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/39925/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206568'}, {'name': 'APPLE-SA-2016-05-16-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00001.html'}]
CVE State: PUBLISHED
Explain CVE-2016-1804
The Multi-Touch subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-16-358'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206567'}, {'name': 'APPLE-SA-2016-05-16-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00004.html'}, {'name': '90696', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/90696'}, {'name': '1035895', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035895'}]
CVE State: PUBLISHED
Explain CVE-2016-1805
CoreStorage in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context via a crafted app.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206567'}, {'name': 'APPLE-SA-2016-05-16-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00004.html'}, {'name': '90696', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/90696'}, {'name': '1035895', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035895'}]
CVE State: PUBLISHED
Explain CVE-2016-1806
Crash Reporter in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context via a crafted app.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-16-346'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206567'}, {'name': 'APPLE-SA-2016-05-16-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00004.html'}, {'name': '90696', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/90696'}, {'name': '1035895', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035895'}]
CVE State: PUBLISHED
Explain CVE-2016-1807
Race condition in the Disk Images subsystem in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows local users to obtain sensitive information from kernel memory via unspecified vectors.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206567'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/137395/OS-X-iOS-Kernel-IOHDIXControllerUserClient-Use-After-Free.html'}, {'name': 'APPLE-SA-2016-05-16-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206566'}, {'name': '90694', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/90694'}, {'name': 'APPLE-SA-2016-05-16-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00003.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206564'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugs.chromium.org/p/project-zero/issues/detail?id=732'}, {'name': '39929', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/39929/'}, {'name': '1035890', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035890'}, {'name': 'APPLE-SA-2016-05-16-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00002.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206568'}, {'name': 'APPLE-SA-2016-05-16-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00001.html'}]
CVE State: PUBLISHED
Explain CVE-2016-1808
The Disk Images subsystem in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206567'}, {'name': 'APPLE-SA-2016-05-16-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206566'}, {'name': '90694', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/90694'}, {'name': 'APPLE-SA-2016-05-16-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00003.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206564'}, {'name': '1035890', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035890'}, {'name': 'APPLE-SA-2016-05-16-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00002.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206568'}, {'name': 'APPLE-SA-2016-05-16-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00001.html'}]
CVE State: PUBLISHED
Explain CVE-2016-1809
Disk Utility in Apple OS X before 10.11.5 uses incorrect encryption keys for disk images, which has unspecified impact and attack vectors.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206567'}, {'name': 'APPLE-SA-2016-05-16-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00004.html'}, {'name': '1035895', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035895'}]
CVE State: PUBLISHED
Explain CVE-2016-1810
The Graphics Drivers subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206567'}, {'name': 'APPLE-SA-2016-05-16-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00004.html'}, {'name': '90696', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/90696'}, {'name': '1035895', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035895'}]
CVE State: PUBLISHED
Explain CVE-2016-1811
ImageIO in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted image.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206567'}, {'name': 'APPLE-SA-2016-05-16-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206566'}, {'name': '90694', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/90694'}, {'name': 'APPLE-SA-2016-05-16-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00003.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206564'}, {'name': '1035890', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035890'}, {'name': 'APPLE-SA-2016-05-16-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00002.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206568'}, {'name': 'APPLE-SA-2016-05-16-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00001.html'}]
CVE State: PUBLISHED
Explain CVE-2016-1812
Buffer overflow in Intel Graphics Driver in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context via a crafted app.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206567'}, {'name': 'APPLE-SA-2016-05-16-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00004.html'}, {'name': '90696', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/90696'}, {'name': '1035895', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035895'}]
CVE State: PUBLISHED
Explain CVE-2016-1813
The IOAccelSharedUserClient2::page_off_resource method in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference) via a crafted app.
Affected Products: n/a
References: [{'name': '39924', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/39924/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206567'}, {'name': 'APPLE-SA-2016-05-16-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00004.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugs.chromium.org/p/project-zero/issues/detail?id=778'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206566'}, {'name': '90694', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/90694'}, {'name': 'APPLE-SA-2016-05-16-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00003.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206564'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/137400/OS-X-IOAccelSharedUserClient2-page_off_resource-NULL-Pointer-Dereference.html'}, {'name': '1035890', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035890'}, {'name': 'APPLE-SA-2016-05-16-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00002.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206568'}, {'name': 'APPLE-SA-2016-05-16-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00001.html'}]
CVE State: PUBLISHED
Explain CVE-2016-1814
IOAcceleratorFamily in Apple iOS before 9.3.2, OS X before 10.11.5, and tvOS before 9.2.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted app.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206567'}, {'name': 'APPLE-SA-2016-05-16-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00004.html'}, {'name': '90696', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/90696'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206564'}, {'name': '1035890', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035890'}, {'name': 'APPLE-SA-2016-05-16-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00002.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206568'}, {'name': 'APPLE-SA-2016-05-16-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00001.html'}]
CVE State: PUBLISHED
Explain CVE-2016-1815
IOAcceleratorFamily in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206567'}, {'name': 'APPLE-SA-2016-05-16-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00004.html'}, {'name': '90696', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/90696'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-16-345'}, {'name': '1035895', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035895'}]
CVE State: PUBLISHED
Explain CVE-2016-1816
IOAcceleratorFamily in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference) via a crafted app.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206567'}, {'name': 'APPLE-SA-2016-05-16-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00004.html'}, {'name': '90696', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/90696'}, {'name': '1035895', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035895'}]
CVE State: PUBLISHED
Explain CVE-2016-1817
IOAcceleratorFamily in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1818 and CVE-2016-1819.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-16-340'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206567'}, {'name': 'APPLE-SA-2016-05-16-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206566'}, {'name': '90694', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/90694'}, {'name': 'APPLE-SA-2016-05-16-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00003.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206564'}, {'name': '1035890', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035890'}, {'name': 'APPLE-SA-2016-05-16-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00002.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206568'}, {'name': 'APPLE-SA-2016-05-16-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00001.html'}]
CVE State: PUBLISHED
Explain CVE-2016-1818
IOAcceleratorFamily in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1817 and CVE-2016-1819.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-16-637'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206567'}, {'name': 'APPLE-SA-2016-05-16-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206566'}, {'name': '90694', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/90694'}, {'name': 'APPLE-SA-2016-05-16-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00003.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206564'}, {'name': '1035890', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035890'}, {'name': 'APPLE-SA-2016-05-16-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00002.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206568'}, {'name': 'APPLE-SA-2016-05-16-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00001.html'}]
CVE State: PUBLISHED
Explain CVE-2016-1819
Use-after-free vulnerability in the IOAccelContext2::clientMemoryForType method in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1817 and CVE-2016-1818.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206567'}, {'name': '39928', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/39928/'}, {'name': 'APPLE-SA-2016-05-16-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206566'}, {'name': '90694', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/90694'}, {'name': 'APPLE-SA-2016-05-16-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00003.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206564'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/137396/OS-X-Kernel-Use-After-Free-From-IOAcceleratorFamily2-Bad-Locking.html'}, {'name': '1035890', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035890'}, {'name': 'APPLE-SA-2016-05-16-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00002.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugs.chromium.org/p/project-zero/issues/detail?id=772'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206568'}, {'name': 'APPLE-SA-2016-05-16-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00001.html'}]
CVE State: PUBLISHED
Explain CVE-2016-1820
Buffer overflow in IOAudioFamily in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context via a crafted app.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206567'}, {'name': 'APPLE-SA-2016-05-16-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00004.html'}, {'name': '90696', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/90696'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-16-347'}, {'name': '1035895', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035895'}]
CVE State: PUBLISHED
Explain CVE-2016-1821
IOAudioFamily in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference) via a crafted app.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206567'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugs.chromium.org/p/project-zero/issues/detail?id=776'}, {'name': 'APPLE-SA-2016-05-16-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00004.html'}, {'name': '90696', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/90696'}, {'name': '39926', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/39926/'}, {'name': '1035895', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035895'}]
CVE State: PUBLISHED
Explain CVE-2016-1822
IOFireWireFamily in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206567'}, {'name': 'APPLE-SA-2016-05-16-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00004.html'}, {'name': '90696', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/90696'}, {'name': '1035895', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035895'}]
CVE State: PUBLISHED