Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2016-1823
The IOHIDDevice::handleReportWithTime function in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (out-of-bounds read and memory corruption) via a crafted IOHIDReportType enum, which triggers an incorrect cast, a different vulnerability than CVE-2016-1824.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206567'}, {'name': 'APPLE-SA-2016-05-16-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206566'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugs.chromium.org/p/project-zero/issues/detail?id=774'}, {'name': '39927', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/39927/'}, {'name': 'APPLE-SA-2016-05-16-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00003.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206564'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/137397/OS-X-Kernel-Raw-Cast-Out-Of-Bounds-Read.html'}, {'name': '1035890', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035890'}, {'name': 'APPLE-SA-2016-05-16-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00002.html'}, {'name': '90698', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/90698'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206568'}, {'name': 'APPLE-SA-2016-05-16-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00001.html'}]
CVE State: PUBLISHED
Explain CVE-2016-1824
IOHIDFamily in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1823.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206567'}, {'name': '90691', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/90691'}, {'name': 'APPLE-SA-2016-05-16-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206566'}, {'name': 'APPLE-SA-2016-05-16-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00003.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206564'}, {'name': '1035890', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035890'}, {'name': 'APPLE-SA-2016-05-16-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00002.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206568'}, {'name': 'APPLE-SA-2016-05-16-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00001.html'}]
CVE State: PUBLISHED
Explain CVE-2016-1825
IOHIDFamily in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206567'}, {'name': 'APPLE-SA-2016-05-16-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00004.html'}, {'name': '90696', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/90696'}, {'name': '1035895', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035895'}]
CVE State: PUBLISHED
Explain CVE-2016-1826
Integer overflow in the dtrace implementation in the kernel in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context via a crafted app.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206567'}, {'name': 'APPLE-SA-2016-05-16-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00004.html'}, {'name': '90696', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/90696'}, {'name': '1035895', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035895'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-16-344'}]
CVE State: PUBLISHED
Explain CVE-2016-1827
The kernel in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1828, CVE-2016-1829, and CVE-2016-1830.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206567'}, {'name': '90691', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/90691'}, {'name': 'APPLE-SA-2016-05-16-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206566'}, {'name': 'APPLE-SA-2016-05-16-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00003.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206564'}, {'name': '1035890', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035890'}, {'name': 'APPLE-SA-2016-05-16-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00002.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206568'}, {'name': 'APPLE-SA-2016-05-16-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00001.html'}]
CVE State: PUBLISHED
Explain CVE-2016-1828
The kernel in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1827, CVE-2016-1829, and CVE-2016-1830.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206567'}, {'name': '90691', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/90691'}, {'name': 'APPLE-SA-2016-05-16-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206566'}, {'name': 'APPLE-SA-2016-05-16-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00003.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206564'}, {'name': '1035890', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035890'}, {'name': 'APPLE-SA-2016-05-16-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00002.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206568'}, {'name': 'APPLE-SA-2016-05-16-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00001.html'}]
CVE State: PUBLISHED
Explain CVE-2016-1829
The kernel in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1827, CVE-2016-1828, and CVE-2016-1830.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206567'}, {'name': '90691', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/90691'}, {'name': 'APPLE-SA-2016-05-16-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206566'}, {'name': 'APPLE-SA-2016-05-16-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00003.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206564'}, {'name': '1035890', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035890'}, {'name': 'APPLE-SA-2016-05-16-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00002.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206568'}, {'name': 'APPLE-SA-2016-05-16-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00001.html'}]
CVE State: PUBLISHED
Explain CVE-2016-1830
The kernel in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1827, CVE-2016-1828, and CVE-2016-1829.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206567'}, {'name': '90691', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/90691'}, {'name': 'APPLE-SA-2016-05-16-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206566'}, {'name': 'APPLE-SA-2016-05-16-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00003.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206564'}, {'name': '1035890', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035890'}, {'name': 'APPLE-SA-2016-05-16-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00002.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206568'}, {'name': 'APPLE-SA-2016-05-16-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00001.html'}]
CVE State: PUBLISHED
Explain CVE-2016-1831
The kernel in Apple iOS before 9.3.2 and OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206567'}, {'name': 'APPLE-SA-2016-05-16-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00004.html'}, {'name': '90696', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/90696'}, {'name': '1035890', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035890'}, {'name': 'APPLE-SA-2016-05-16-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00002.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206568'}]
CVE State: PUBLISHED
Explain CVE-2016-1832
libc in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206567'}, {'name': '90691', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/90691'}, {'name': 'APPLE-SA-2016-05-16-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206566'}, {'name': 'APPLE-SA-2016-05-16-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00003.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206564'}, {'name': '1035890', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035890'}, {'name': 'APPLE-SA-2016-05-16-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00002.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206568'}, {'name': 'APPLE-SA-2016-05-16-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00001.html'}]
CVE State: PUBLISHED
Explain CVE-2016-1833
The htmlCurrentChar function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://kc.mcafee.com/corporate/index?page=content&id=SB10170'}, {'name': 'RHSA-2016:1292', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2016:1292'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206567'}, {'name': '90691', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/90691'}, {'name': 'DSA-3593', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2016/dsa-3593'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugs.chromium.org/p/project-zero/issues/detail?id=636'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://xmlsoft.org/news.html'}, {'name': 'APPLE-SA-2016-05-16-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00004.html'}, {'name': 'USN-2994-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2994-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206566'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.gnome.org/show_bug.cgi?id=758606'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.tenable.com/security/tns-2016-18'}, {'name': 'APPLE-SA-2016-05-16-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00003.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206564'}, {'name': 'RHSA-2016:2957', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-2957.html'}, {'name': '1035890', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035890'}, {'name': 'APPLE-SA-2016-05-16-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00002.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://git.gnome.org/browse/libxml2/commit/?id=0bcd05c5cd83dec3406c8f68b769b1d610c72f76'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206568'}, {'name': 'APPLE-SA-2016-05-16-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00001.html'}]
CVE State: PUBLISHED
Explain CVE-2016-1834
Heap-based buffer overflow in the xmlStrncat function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XML document.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://git.gnome.org/browse/libxml2/commit/?id=8fbbf5513d609c1770b391b99e33314cd0742704'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://kc.mcafee.com/corporate/index?page=content&id=SB10170'}, {'name': 'RHSA-2016:1292', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2016:1292'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206567'}, {'name': '90691', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/90691'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.gnome.org/show_bug.cgi?id=763071'}, {'name': 'DSA-3593', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2016/dsa-3593'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://xmlsoft.org/news.html'}, {'name': 'APPLE-SA-2016-05-16-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00004.html'}, {'name': 'USN-2994-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2994-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206566'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.tenable.com/security/tns-2016-18'}, {'name': 'APPLE-SA-2016-05-16-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00003.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206564'}, {'name': 'RHSA-2016:2957', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-2957.html'}, {'name': '1035890', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035890'}, {'name': 'APPLE-SA-2016-05-16-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00002.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206568'}, {'name': 'APPLE-SA-2016-05-16-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00001.html'}]
CVE State: PUBLISHED
Explain CVE-2016-1835
Use-after-free vulnerability in the xmlSAX2AttributeNs function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2 and OS X before 10.11.5, allows remote attackers to cause a denial of service via a crafted XML document.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://kc.mcafee.com/corporate/index?page=content&id=SB10170'}, {'name': 'RHSA-2016:1292', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2016:1292'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206567'}, {'name': 'DSA-3593', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2016/dsa-3593'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://xmlsoft.org/news.html'}, {'name': 'APPLE-SA-2016-05-16-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://git.gnome.org/browse/libxml2/commit/?id=38eae571111db3b43ffdeb05487c9f60551906fb'}, {'name': '90696', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/90696'}, {'name': 'USN-2994-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2994-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.tenable.com/security/tns-2016-18'}, {'name': 'RHSA-2016:2957', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-2957.html'}, {'name': '1035890', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035890'}, {'name': 'APPLE-SA-2016-05-16-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00002.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.gnome.org/show_bug.cgi?id=759020'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206568'}]
CVE State: PUBLISHED
Explain CVE-2016-1837
Multiple use-after-free vulnerabilities in the (1) htmlPArsePubidLiteral and (2) htmlParseSystemiteral functions in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allow remote attackers to cause a denial of service via a crafted XML document.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://kc.mcafee.com/corporate/index?page=content&id=SB10170'}, {'name': 'RHSA-2016:1292', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2016:1292'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206567'}, {'name': '90691', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/90691'}, {'name': 'DSA-3593', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2016/dsa-3593'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://xmlsoft.org/news.html'}, {'name': 'APPLE-SA-2016-05-16-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00004.html'}, {'name': 'USN-2994-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2994-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206566'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://git.gnome.org/browse/libxml2/commit/?id=11ed4a7a90d5ce156a18980a4ad4e53e77384852'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.tenable.com/security/tns-2016-18'}, {'name': 'APPLE-SA-2016-05-16-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00003.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206564'}, {'name': 'RHSA-2016:2957', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-2957.html'}, {'name': '1035890', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035890'}, {'name': 'APPLE-SA-2016-05-16-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00002.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206568'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.gnome.org/show_bug.cgi?id=760263'}, {'name': 'APPLE-SA-2016-05-16-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00001.html'}]
CVE State: PUBLISHED
Explain CVE-2016-1840
Heap-based buffer overflow in the xmlFAParsePosCharGroup function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XML document.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://kc.mcafee.com/corporate/index?page=content&id=SB10170'}, {'name': 'RHSA-2016:1292', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2016:1292'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206567'}, {'name': '90691', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/90691'}, {'name': 'DSA-3593', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2016/dsa-3593'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.gnome.org/show_bug.cgi?id=757711'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://xmlsoft.org/news.html'}, {'name': 'APPLE-SA-2016-05-16-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00004.html'}, {'name': 'USN-2994-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2994-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206566'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.tenable.com/security/tns-2016-18'}, {'name': 'APPLE-SA-2016-05-16-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00003.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206564'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://git.gnome.org/browse/libxml2/commit/?id=cbb271655cadeb8dbb258a64701d9a3a0c4835b4'}, {'name': 'RHSA-2016:2957', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-2957.html'}, {'name': 'GLSA-201701-37', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201701-37'}, {'name': '1035890', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035890'}, {'name': 'APPLE-SA-2016-05-16-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00002.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206568'}, {'name': 'APPLE-SA-2016-05-16-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00001.html'}]
CVE State: PUBLISHED
Explain CVE-2016-1841
libxslt, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206567'}, {'name': '90691', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/90691'}, {'name': 'APPLE-SA-2016-05-16-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206566'}, {'name': 'APPLE-SA-2016-05-16-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00003.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206564'}, {'name': '1035890', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035890'}, {'name': 'APPLE-SA-2016-05-16-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00002.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206568'}, {'name': 'APPLE-SA-2016-05-16-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00001.html'}, {'name': 'FEDORA-2019-320d5295fc', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SK4YNISS22MJY22YX5I6V2U63QZAUEHA/'}]
CVE State: PUBLISHED
Explain CVE-2016-1842
MapKit in Apple iOS before 9.3.2, OS X before 10.11.5, and watchOS before 2.2.1 does not use HTTPS for shared links, which allows remote attackers to obtain sensitive information by sniffing the network for HTTP traffic.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206567'}, {'name': 'APPLE-SA-2016-05-16-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206566'}, {'name': 'APPLE-SA-2016-05-16-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00003.html'}, {'name': '1035890', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035890'}, {'name': 'APPLE-SA-2016-05-16-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00002.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206568'}]
CVE State: PUBLISHED
Explain CVE-2016-1843
The Messages component in Apple OS X before 10.11.5 mishandles filename encoding, which allows remote attackers to obtain sensitive information via unspecified vectors.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206567'}, {'name': 'APPLE-SA-2016-05-16-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00004.html'}, {'name': '90696', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/90696'}, {'name': '1035895', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035895'}]
CVE State: PUBLISHED
Explain CVE-2016-1844
The Messages component in Apple OS X before 10.11.5 mishandles roster changes, which allows remote attackers to modify contact lists via unspecified vectors.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206567'}, {'name': 'APPLE-SA-2016-05-16-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00004.html'}, {'name': '90696', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/90696'}, {'name': '1035895', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035895'}]
CVE State: PUBLISHED
Explain CVE-2016-1846
The nvCommandQueue::GetHandleIndex method in the NVIDIA Graphics Drivers subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference and memory corruption) via a crafted app.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206567'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugs.chromium.org/p/project-zero/issues/detail?id=784'}, {'name': 'APPLE-SA-2016-05-16-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00004.html'}, {'name': '90696', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/90696'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/137403/OS-X-GeForce.kext-NULL-Pointer-Dereference.html'}, {'name': '39920', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/39920/'}, {'name': '1035895', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035895'}]
CVE State: PUBLISHED
Explain CVE-2016-1847
OpenGL, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206567'}, {'name': '90691', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/90691'}, {'name': 'APPLE-SA-2016-05-16-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206566'}, {'name': 'APPLE-SA-2016-05-16-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00003.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206564'}, {'name': '1035890', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035890'}, {'name': 'APPLE-SA-2016-05-16-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00002.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206568'}, {'name': 'APPLE-SA-2016-05-16-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00001.html'}]
CVE State: PUBLISHED
Explain CVE-2016-1848
QuickTime in Apple OS X before 10.11.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://protekresearchlab.com/cosig-2016-19/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206567'}, {'name': '39839', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/39839/'}, {'name': 'APPLE-SA-2016-05-16-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00004.html'}, {'name': '90696', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/90696'}, {'name': '1035895', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035895'}]
CVE State: PUBLISHED
Explain CVE-2016-1849
The "Clear History and Website Data" feature in Apple Safari before 9.1.1, as used in iOS before 9.3.2 and other products, mishandles the deletion of browsing history, which might allow local users to obtain sensitive information by leveraging read access to a Safari directory.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2016-05-16-5', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00005.html'}, {'name': '1035888', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035888'}, {'name': 'APPLE-SA-2016-05-16-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00002.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206565'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206568'}]
CVE State: PUBLISHED
Explain CVE-2016-1850
SceneKit in Apple OS X before 10.11.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206567'}, {'name': 'APPLE-SA-2016-05-16-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00004.html'}, {'name': '90696', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/90696'}, {'name': '1035895', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035895'}]
CVE State: PUBLISHED
Explain CVE-2016-1851
The Screen Lock feature in Apple OS X before 10.11.5 mishandles password profiles, which allows physically proximate attackers to reset expired passwords in the lock-screen state via unspecified vectors.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206567'}, {'name': 'APPLE-SA-2016-05-16-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00004.html'}, {'name': '90696', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/90696'}, {'name': '1035895', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035895'}]
CVE State: PUBLISHED
Explain CVE-2016-1852
Siri in Apple iOS before 9.3.2 does not block data detectors within results in the lock-screen state, which allows physically proximate attackers to obtain sensitive contact and photo information via unspecified vectors.
Affected Products: n/a
References: [{'name': '1035890', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035890'}, {'name': 'APPLE-SA-2016-05-16-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00002.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206568'}]
CVE State: PUBLISHED
Explain CVE-2016-1853
Tcl in Apple OS X before 10.11.5 allows remote attackers to obtain sensitive information by leveraging SSLv2 support.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206567'}, {'name': 'APPLE-SA-2016-05-16-4', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00004.html'}, {'name': '90696', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/90696'}, {'name': '1035895', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035895'}]
CVE State: PUBLISHED
Explain CVE-2016-1854
WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-1855, CVE-2016-1856, and CVE-2016-1857.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2016-05-16-5', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00005.html'}, {'name': '1035888', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035888'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/137229/WebKitGTK-Code-Execution-Denial-Of-Service-Memory-Corruption.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206564'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-16-341'}, {'name': 'APPLE-SA-2016-05-16-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00002.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206565'}, {'name': '20160530 WebKitGTK+ Security Advisory WSA-2016-0004', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/538522/100/0/threaded'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206568'}, {'name': 'APPLE-SA-2016-05-16-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00001.html'}]
CVE State: PUBLISHED
Explain CVE-2016-1855
WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-1854, CVE-2016-1856, and CVE-2016-1857.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2016-05-16-5', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00005.html'}, {'name': '1035888', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035888'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206564'}, {'name': 'APPLE-SA-2016-05-16-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00002.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206565'}, {'name': '20160530 WebKitGTK+ Security Advisory WSA-2016-0004', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/538522/100/0/threaded'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206568'}, {'name': 'APPLE-SA-2016-05-16-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00001.html'}]
CVE State: PUBLISHED
Explain CVE-2016-1856
WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-1854, CVE-2016-1855, and CVE-2016-1857.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2016-05-16-5', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00005.html'}, {'name': '1035888', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035888'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/137229/WebKitGTK-Code-Execution-Denial-Of-Service-Memory-Corruption.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206564'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-16-342'}, {'name': 'APPLE-SA-2016-05-16-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00002.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206565'}, {'name': '20160530 WebKitGTK+ Security Advisory WSA-2016-0004', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/538522/100/0/threaded'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206568'}, {'name': 'APPLE-SA-2016-05-16-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00001.html'}]
CVE State: PUBLISHED
Explain CVE-2016-1857
WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-1854, CVE-2016-1855, and CVE-2016-1856.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2016-05-16-5', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00005.html'}, {'name': '1035888', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035888'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/137229/WebKitGTK-Code-Execution-Denial-Of-Service-Memory-Corruption.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206564'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-16-343'}, {'name': 'APPLE-SA-2016-05-16-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00002.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206565'}, {'name': '20160530 WebKitGTK+ Security Advisory WSA-2016-0004', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/538522/100/0/threaded'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206568'}, {'name': 'APPLE-SA-2016-05-16-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00001.html'}]
CVE State: PUBLISHED
Explain CVE-2016-1858
WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, improperly tracks taint attributes, which allows remote attackers to obtain sensitive information via a crafted web site.
Affected Products: n/a
References: [{'name': 'APPLE-SA-2016-05-16-5', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00005.html'}, {'name': '1035888', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035888'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/137229/WebKitGTK-Code-Execution-Denial-Of-Service-Memory-Corruption.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206564'}, {'name': 'APPLE-SA-2016-05-16-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00002.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206565'}, {'name': '20160530 WebKitGTK+ Security Advisory WSA-2016-0004', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/538522/100/0/threaded'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206568'}, {'name': 'APPLE-SA-2016-05-16-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/May/msg00001.html'}]
CVE State: PUBLISHED