Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2016-1726
WebKit, as used in Apple iOS before 9.2.1 and Safari before 9.0.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-1723 and CVE-2016-1725.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/136227/WebKitGTK-Memory-Corruption-Denial-Of-Service.html'}, {'name': '81263', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/81263'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206168'}, {'name': '20160311 WebKitGTK+ Security Advisory WSA-2016-0002', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/537771/100/0/threaded'}, {'name': '1034737', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034737'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT205730'}, {'name': 'APPLE-SA-2016-03-21-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html'}, {'name': 'APPLE-SA-2016-01-19-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Jan/msg00002.html'}, {'name': 'GLSA-201706-15', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201706-15'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT205732'}, {'name': 'APPLE-SA-2016-01-19-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Jan/msg00004.html'}]
CVE State: PUBLISHED
Explain CVE-2016-1727
WebKit, as used in Apple iOS before 9.2.1, Safari before 9.0.3, and tvOS before 9.1.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-1724.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/136227/WebKitGTK-Memory-Corruption-Denial-Of-Service.html'}, {'name': '81263', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/81263'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206168'}, {'name': '20160311 WebKitGTK+ Security Advisory WSA-2016-0002', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/537771/100/0/threaded'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT205729'}, {'name': '1034737', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034737'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT205730'}, {'name': 'APPLE-SA-2016-01-25-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Jan/msg00005.html'}, {'name': 'APPLE-SA-2016-03-21-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html'}, {'name': 'APPLE-SA-2016-01-19-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Jan/msg00002.html'}, {'name': 'GLSA-201706-15', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201706-15'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT205732'}, {'name': 'APPLE-SA-2016-01-19-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Jan/msg00004.html'}]
CVE State: PUBLISHED
Explain CVE-2016-1728
The Cascading Style Sheets (CSS) implementation in Apple iOS before 9.2.1 and Safari before 9.0.3 mishandles the "a:visited button" selector during height processing, which makes it easier for remote attackers to obtain sensitive browser-history information via a crafted web site.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/136227/WebKitGTK-Memory-Corruption-Denial-Of-Service.html'}, {'name': '81263', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/81263'}, {'name': '20160311 WebKitGTK+ Security Advisory WSA-2016-0002', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/537771/100/0/threaded'}, {'name': '1034737', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034737'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT205730'}, {'name': 'APPLE-SA-2016-01-19-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Jan/msg00002.html'}, {'name': 'GLSA-201706-15', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201706-15'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT205732'}, {'name': 'APPLE-SA-2016-01-19-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Jan/msg00004.html'}]
CVE State: PUBLISHED
Explain CVE-2016-1729
Untrusted search path vulnerability in OSA Scripts in Apple OS X before 10.11.3 allows attackers to load arbitrary script libraries via a quarantined application.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT205731'}, {'name': '1034736', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034736'}, {'name': 'APPLE-SA-2016-01-19-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Jan/msg00003.html'}]
CVE State: PUBLISHED
Explain CVE-2016-1730
WebSheet in Apple iOS before 9.2.1 allows remote attackers to read or write to cookies by operating a crafted captive portal.
Affected Products: n/a
References: [{'name': '1034737', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034737'}, {'name': 'APPLE-SA-2016-01-19-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Jan/msg00002.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT205732'}]
CVE State: PUBLISHED
Explain CVE-2016-1731
Apple Software Update before 2.2 on Windows does not use HTTPS, which makes it easier for man-in-the-middle attackers to spoof updates by modifying the client-server data stream.
Affected Products: n/a
References: [{'name': '1035256', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035256'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/kb/HT206091'}, {'name': '84283', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/84283'}]
CVE State: PUBLISHED
Explain CVE-2016-1732
AppleRAID in Apple OS X before 10.11.4 allows local users to obtain sensitive kernel memory-layout information or cause a denial of service (out-of-bounds read) via unspecified vectors.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2016-03-21-5', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206167'}, {'name': '1035363', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035363'}]
CVE State: PUBLISHED
Explain CVE-2016-1733
AppleRAID in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2016-03-21-5', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206167'}, {'name': '1035363', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035363'}]
CVE State: PUBLISHED
Explain CVE-2016-1734
AppleUSBNetworking in Apple iOS before 9.3 and OS X before 10.11.4 allows physically proximate attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted USB device.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2016-03-21-5', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206167'}, {'name': '1035353', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035353'}, {'name': 'APPLE-SA-2016-03-21-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206166'}]
CVE State: PUBLISHED
Explain CVE-2016-1735
Bluetooth in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1736.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2016-03-21-5', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206167'}, {'name': '1035363', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035363'}]
CVE State: PUBLISHED
Explain CVE-2016-1736
Bluetooth in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1735.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2016-03-21-5', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206167'}, {'name': '1035363', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035363'}]
CVE State: PUBLISHED
Explain CVE-2016-1737
Carbon in Apple OS X before 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted .dfont file.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2016-03-21-5', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206167'}, {'name': '1035363', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035363'}]
CVE State: PUBLISHED
Explain CVE-2016-1738
dyld in Apple OS X before 10.11.4 allows attackers to bypass a code-signing protection mechanism via a modified app.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2016-03-21-5', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206167'}, {'name': '1035363', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035363'}]
CVE State: PUBLISHED
Explain CVE-2016-1740
FontParser in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2016-03-21-5', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206167'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206168'}, {'name': '1035353', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035353'}, {'name': 'APPLE-SA-2016-03-21-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html'}, {'name': 'APPLE-SA-2016-03-21-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-16-201'}, {'name': 'APPLE-SA-2016-03-21-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206169'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206166'}]
CVE State: PUBLISHED
Explain CVE-2016-1741
The NVIDIA driver in the Graphics Drivers subsystem in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2016-03-21-5', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206167'}, {'name': '39615', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/39615/'}, {'name': '1035363', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035363'}]
CVE State: PUBLISHED
Explain CVE-2016-1742
Untrusted search path vulnerability in the installer in Apple iTunes before 12.4 allows local users to gain privileges via a Trojan horse DLL in the current working directory.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2016-05-16-6', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00006.html'}, {'name': '1035887', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035887'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206379'}]
CVE State: PUBLISHED
Explain CVE-2016-1743
The Intel driver in the Graphics Drivers subsystem in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1744.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2016-03-21-5', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206167'}, {'name': '39675', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/39675/'}, {'name': '1035363', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035363'}]
CVE State: PUBLISHED
Explain CVE-2016-1744
The Intel driver in the Graphics Drivers subsystem in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1743.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2016-03-21-5', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206167'}, {'name': '39616', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/39616/'}, {'name': '1035363', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035363'}]
CVE State: PUBLISHED
Explain CVE-2016-1745
IOFireWireFamily in Apple OS X before 10.11.4 allows local users to cause a denial of service (NULL pointer dereference) via unspecified vectors.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2016-03-21-5', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206167'}, {'name': '1035363', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035363'}]
CVE State: PUBLISHED
Explain CVE-2016-1746
IOGraphics in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1747.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2016-03-21-5', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206167'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-16-202'}, {'name': '1035363', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035363'}]
CVE State: PUBLISHED
Explain CVE-2016-1747
IOGraphics in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1746.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2016-03-21-5', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206167'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-16-205'}, {'name': '1035363', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035363'}]
CVE State: PUBLISHED
Explain CVE-2016-1748
IOHIDFamily in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows attackers to obtain sensitive kernel memory-layout information via a crafted app.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT205635'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT205637'}, {'name': 'APPLE-SA-2015-12-08-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Dec/msg00002.html'}, {'name': '1035353', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035353'}, {'name': 'APPLE-SA-2015-12-08-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Dec/msg00005.html'}, {'name': 'APPLE-SA-2015-12-08-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT205641'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT205640'}, {'name': 'APPLE-SA-2015-12-08-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Dec/msg00001.html'}]
CVE State: PUBLISHED
Explain CVE-2016-1749
IOUSBFamily in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2016-03-21-5', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206167'}, {'name': '39607', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/39607/'}, {'name': '1035363', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035363'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-16-206'}]
CVE State: PUBLISHED
Explain CVE-2016-1750
Use-after-free vulnerability in the kernel in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows attackers to execute arbitrary code in a privileged context via a crafted app.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2016-03-21-5', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206167'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206168'}, {'name': '1035353', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035353'}, {'name': 'APPLE-SA-2016-03-21-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html'}, {'name': 'APPLE-SA-2016-03-21-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html'}, {'name': 'APPLE-SA-2016-03-21-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206169'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206166'}]
CVE State: PUBLISHED
Explain CVE-2016-1751
The kernel in Apple iOS before 9.3, tvOS before 9.2, and watchOS before 2.2 does not properly restrict the execute permission, which allows attackers to bypass a code-signing protection mechanism via a crafted app.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206168'}, {'name': '1035353', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035353'}, {'name': 'APPLE-SA-2016-03-21-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html'}, {'name': 'APPLE-SA-2016-03-21-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html'}, {'name': 'APPLE-SA-2016-03-21-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206169'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206166'}]
CVE State: PUBLISHED
Explain CVE-2016-1752
The kernel in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows attackers to cause a denial of service via a crafted app.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2016-03-21-5', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206167'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206168'}, {'name': '1035353', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035353'}, {'name': 'APPLE-SA-2016-03-21-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html'}, {'name': 'APPLE-SA-2016-03-21-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html'}, {'name': 'APPLE-SA-2016-03-21-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206169'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206166'}]
CVE State: PUBLISHED
Explain CVE-2016-1753
Multiple integer overflows in the kernel in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allow attackers to execute arbitrary code in a privileged context via a crafted app.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2016-03-21-5', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206167'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206168'}, {'name': '1035353', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035353'}, {'name': 'APPLE-SA-2016-03-21-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html'}, {'name': 'APPLE-SA-2016-03-21-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-16-207'}, {'name': 'APPLE-SA-2016-03-21-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206169'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206166'}]
CVE State: PUBLISHED
Explain CVE-2016-1754
The kernel in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1755.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2016-03-21-5', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206167'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206168'}, {'name': '1035353', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035353'}, {'name': 'APPLE-SA-2016-03-21-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html'}, {'name': 'APPLE-SA-2016-03-21-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html'}, {'name': 'APPLE-SA-2016-03-21-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206169'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206166'}]
CVE State: PUBLISHED
Explain CVE-2016-1755
The kernel in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1754.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2016-03-21-5', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206167'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206168'}, {'name': '1035353', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035353'}, {'name': '39614', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/39614/'}, {'name': 'APPLE-SA-2016-03-21-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html'}, {'name': 'APPLE-SA-2016-03-21-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html'}, {'name': 'APPLE-SA-2016-03-21-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206169'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206166'}]
CVE State: PUBLISHED
Explain CVE-2016-1756
The kernel in Apple iOS before 9.3 and OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference) via a crafted app.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2016-03-21-5', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206167'}, {'name': '1035353', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035353'}, {'name': 'APPLE-SA-2016-03-21-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206166'}]
CVE State: PUBLISHED
Explain CVE-2016-1757
Race condition in the kernel in Apple iOS before 9.3 and OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context via a crafted app.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2016-03-21-5', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html'}, {'name': '39595', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/39595/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206167'}, {'name': '39741', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/39741/'}, {'name': '1035353', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035353'}, {'name': 'APPLE-SA-2016-03-21-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugs.chromium.org/p/project-zero/issues/detail?id=676'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206166'}]
CVE State: PUBLISHED
Explain CVE-2016-1758
The kernel in Apple iOS before 9.3 and OS X before 10.11.4 allows attackers to obtain sensitive memory-layout information or cause a denial of service (out-of-bounds read) via a crafted app.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2016-03-21-5', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206167'}, {'name': '1035353', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035353'}, {'name': 'APPLE-SA-2016-03-21-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206166'}]
CVE State: PUBLISHED
Explain CVE-2016-1759
The kernel in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2016-03-21-5', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206167'}, {'name': '1035363', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035363'}]
CVE State: PUBLISHED
Explain CVE-2016-1760
The XPC Services API in LaunchServices in Apple iOS before 9.3 allows attackers to bypass intended event-handler restrictions and modify an arbitrary app's events via a crafted app.
Affected Products: n/a
References: [{'name': '1035353', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035353'}, {'name': 'APPLE-SA-2016-03-21-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206166'}]
CVE State: PUBLISHED
Explain CVE-2016-1761
libxml2 in Apple iOS before 9.3, OS X before 10.11.4, and watchOS before 2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XML document.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2016-03-21-5', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206167'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206168'}, {'name': '1035353', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035353'}, {'name': 'APPLE-SA-2016-03-21-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-16-203'}, {'name': 'APPLE-SA-2016-03-21-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206166'}]
CVE State: PUBLISHED
Explain CVE-2016-1762
The xmlNextChar function in libxml2 before 2.9.4 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://kc.mcafee.com/corporate/index?page=content&id=SB10170'}, {'name': 'APPLE-SA-2016-03-21-5', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206167'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206168'}, {'name': 'RHSA-2016:1292', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2016:1292'}, {'name': 'APPLE-SA-2016-03-21-6', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00005.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html'}, {'name': 'DSA-3593', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2016/dsa-3593'}, {'name': '1035353', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035353'}, {'name': 'APPLE-SA-2016-03-21-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://xmlsoft.org/news.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.gnome.org/show_bug.cgi?id=759671'}, {'name': 'USN-2994-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2994-1'}, {'name': 'APPLE-SA-2016-03-21-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://git.gnome.org/browse/libxml2/commit/?id=a7a94612aa3b16779e2c74e1fa353b5d9786c602'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206171'}, {'name': 'RHSA-2016:2957', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-2957.html'}, {'name': 'APPLE-SA-2016-03-21-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206169'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206166'}, {'name': '85059', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/85059'}]
CVE State: PUBLISHED
Explain CVE-2016-1763
Messages in Apple iOS before 9.3 does not ensure that an auto-fill action applies to the intended message thread, which allows remote authenticated users to obtain sensitive information by providing a crafted sms: URL and reading a thread.
Affected Products: n/a
References: [{'name': '1035353', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035353'}, {'name': 'APPLE-SA-2016-03-21-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206166'}]
CVE State: PUBLISHED
Explain CVE-2016-1764
The Content Security Policy (CSP) implementation in Messages in Apple OS X before 10.11.4 allows remote attackers to obtain sensitive information via a javascript: URL.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2016-03-21-5', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206167'}, {'name': '1035363', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035363'}]
CVE State: PUBLISHED
Explain CVE-2016-1765
otool in Apple Xcode before 7.3 allows local users to gain privileges or cause a denial of service (memory corruption and application crash) via unspecified vectors.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206172'}, {'name': '1035352', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035352'}, {'name': 'APPLE-SA-2016-03-21-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00003.html'}]
CVE State: PUBLISHED
Explain CVE-2016-1766
The Profiles component in Apple iOS before 9.3 does not properly validate certificates, which allows attackers to spoof an MDM profile trust relationship via unspecified vectors.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-16-314'}, {'name': '1035353', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035353'}, {'name': 'APPLE-SA-2016-03-21-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206166'}]
CVE State: PUBLISHED
Explain CVE-2016-1767
QuickTime in Apple OS X before 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FlashPix image, a different vulnerability than CVE-2016-1768.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2016-03-21-5', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206167'}, {'name': '39633', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/39633/'}, {'name': '1035363', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035363'}]
CVE State: PUBLISHED
Explain CVE-2016-1768
QuickTime in Apple OS X before 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FlashPix image, a different vulnerability than CVE-2016-1767.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2016-03-21-5', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206167'}, {'name': '39634', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/39634/'}, {'name': '1035363', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035363'}]
CVE State: PUBLISHED
Explain CVE-2016-1769
QuickTime in Apple OS X before 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Photoshop file.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2016-03-21-5', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206167'}, {'name': '39635', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/39635/'}, {'name': '1035363', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035363'}]
CVE State: PUBLISHED
Explain CVE-2016-1770
The Reminders component in Apple OS X before 10.11.4 allows attackers to bypass an intended user-confirmation requirement and trigger a dialing action via a tel: URL.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2016-03-21-5', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206167'}, {'name': '1035363', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035363'}]
CVE State: PUBLISHED
Explain CVE-2016-1771
The Downloads feature in Apple Safari before 9.1 mishandles file expansion, which allows remote attackers to cause a denial of service via a crafted web site.
Affected Products: n/a
References: [{'name': '1035354', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035354'}, {'name': 'APPLE-SA-2016-03-21-6', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00005.html'}, {'name': '85055', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/85055'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206171'}]
CVE State: PUBLISHED
Explain CVE-2016-1772
The Top Sites feature in Apple Safari before 9.1 mishandles cookie storage, which makes it easier for remote web servers to track users via unspecified vectors.
Affected Products: n/a
References: [{'name': '1035354', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035354'}, {'name': 'APPLE-SA-2016-03-21-6', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00005.html'}, {'name': '85055', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/85055'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206171'}]
CVE State: PUBLISHED
Explain CVE-2016-1773
The code-signing subsystem in Apple OS X before 10.11.4 does not properly verify file ownership, which allows local users to determine the existence of arbitrary files via unspecified vectors.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2016-03-21-5', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206167'}, {'name': '1035363', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035363'}]
CVE State: PUBLISHED
Explain CVE-2016-1774
The Time Machine server in Server App in Apple OS X Server before 5.1 does not notify the user about ignored permissions during a backup, which makes it easier for remote attackers to obtain sensitive information in opportunistic circumstances by reading backup data that lacks intended restrictions.
Affected Products: n/a
References: [{'name': '1035342', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035342'}, {'name': '85054', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/85054'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206173'}, {'name': 'APPLE-SA-2016-03-21-7', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00006.html'}]
CVE State: PUBLISHED
Explain CVE-2016-1775
TrueTypeScaler in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT205635'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT205637'}, {'name': 'APPLE-SA-2015-12-08-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Dec/msg00002.html'}, {'name': '1035353', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035353'}, {'name': 'APPLE-SA-2015-12-08-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Dec/msg00005.html'}, {'name': 'APPLE-SA-2015-12-08-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT205641'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT205640'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-16-204'}, {'name': 'APPLE-SA-2015-12-08-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2015/Dec/msg00001.html'}]
CVE State: PUBLISHED
Explain CVE-2016-1776
Web Server in Apple OS X Server before 5.1 does not properly restrict access to .DS_Store and .htaccess files, which allows remote attackers to obtain sensitive configuration information via an HTTP request.
Affected Products: n/a
References: [{'name': '1035342', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035342'}, {'name': '85054', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/85054'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206173'}, {'name': 'APPLE-SA-2016-03-21-7', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00006.html'}]
CVE State: PUBLISHED
Explain CVE-2016-1777
Web Server in Apple OS X Server before 5.1 supports the RC4 algorithm, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified vectors.
Affected Products: n/a
References: [{'name': '1035342', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035342'}, {'name': '85054', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/85054'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206173'}, {'name': 'APPLE-SA-2016-03-21-7', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00006.html'}]
CVE State: PUBLISHED