Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-4737 State: PUBLISHED Published: 2016-09-25T10:00:00 Last Updated: 2024-08-06T00:39:26.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit in Apple iOS before 10, Safari before 10, tvOS before 10, and watchOS before 3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT207141 - http://www.securityfocus.com/bid/93065 - http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html - https://support.apple.com/HT207157 - http://lists.apple.com/archives/security-announce/2016/Sep/msg00010.
sg00008.html - https://support.apple.com/HT207157 - http://lists.apple.com/archives/security-announce/2016/Sep/msg00010.html - http://lists.apple.com/archives/security-announce/2016/Sep/msg00011.html - http://www.securitytracker.com/id/1036854 - https://support.apple.com/HT207142 - https://support.apple.com/HT207143 - http://lists.apple.com/archives/security-announce/2016/Sep/msg00007.html
CVE ID: CVE-2016-4738 State: PUBLISHED Published: 2016-09-25T10:00:00 Last Updated: 2024-08-06T00:39:26.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: libxslt in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT207141 - http://www.securitytracker.com/id/1036858 - http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html - http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html - http://lists.apple.com/ar
Sep/msg00006.html - http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html - http://lists.apple.com/archives/security-announce/2016/Sep/msg00010.html - http://lists.apple.com/archives/security-announce/2016/Sep/msg00011.html - http://www.securityfocus.com/bid/93054 - https://support.apple.com/HT207170 - http://www.debian.org/security/2016/dsa-3709 - https://support.apple.com/HT207142 - https://support.apple.com/HT207143 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SK4YNISS22MJY22YX5I6V2U63QZAUEHA/
CVE ID: CVE-2016-4739 State: PUBLISHED Published: 2016-09-25T10:00:00 Last Updated: 2024-08-06T00:39:26.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: mDNSResponder in Apple OS X before 10.12, when VMnet.framework is used, arranges for a DNS proxy to listen on all interfaces, which allows remote attackers to obtain sensitive information by sending a DNS query to an unintended interface. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036858 - http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html - http://www.securityfocus.com/bid/93055 - https://support.apple.com/HT207170
CVE ID: CVE-2016-4740 State: PUBLISHED Published: 2016-09-18T22:00:00 Last Updated: 2024-08-06T00:39:26.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple iOS before 10, when Handoff for Messages is used, does not ensure that a Messages signin has occurred before displaying messages, which might allow attackers to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html - http://www.securitytracker.com/id/1036797 - http://lists.apple.com/archives/security-announce/2016/Sep/msg00002.html - http://www.securityfocus.com/bid/92932 - https://sup
lists.apple.com/archives/security-announce/2016/Sep/msg00002.html - http://www.securityfocus.com/bid/92932 - https://support.apple.com/HT207143
CVE ID: CVE-2016-4741 State: PUBLISHED Published: 2016-09-18T22:00:00 Last Updated: 2024-08-06T00:39:26.137Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Assets component in Apple iOS before 10 allows man-in-the-middle attackers to block software updates via vectors related to lack of an HTTPS session for retrieving updates. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html - http://www.securitytracker.com/id/1036797 - http://lists.apple.com/archives/security-announce/2016/Sep/msg00002.html - http://www.securityfocus.com/bid/92932 - https://support.apple.com/HT207143
CVE ID: CVE-2016-4742 State: PUBLISHED Published: 2016-09-25T10:00:00 Last Updated: 2024-08-06T00:39:26.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: NSSecureTextField in Apple OS X before 10.12 does not enable Secure Input, which allows attackers to discover credentials via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036858 - http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html - http://www.securityfocus.com/bid/93055 - https://support.apple.com/HT207170
CVE ID: CVE-2016-4743 State: PUBLISHED Published: 2017-02-20T08:35:00 Last Updated: 2024-08-06T00:39:26.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to obtain sensitive information from process memory or cause a denial of service (memory corruption and application crash) via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT207427 - http://www.securityfocus.com/bid/9
st Notes: - CVE Program Container: References: - https://support.apple.com/HT207427 - http://www.securityfocus.com/bid/94907 - https://support.apple.com/HT207421 - http://www.securitytracker.com/id/1037459 - https://support.apple.com/HT207422 - https://security.gentoo.org/glsa/201706-15 - https://support.apple.com/HT207424
CVE ID: CVE-2016-4744 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-4745 State: PUBLISHED Published: 2016-09-25T10:00:00 Last Updated: 2024-08-06T00:39:26.028Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Kerberos 5 (aka krb5) PAM module in Apple OS X before 10.12 does not use constant-time operations for determining username validity, which makes it easier for remote attackers to enumerate user accounts via a timing side-channel attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036858 - http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html - http://www.securityfocus.com/bid/93055 - https://support.apple.com/HT207170
CVE ID: CVE-2016-4746 State: PUBLISHED Published: 2016-09-18T22:00:00 Last Updated: 2024-08-06T00:39:26.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Keyboards component in Apple iOS before 10 does not properly use a cache for auto-correct suggestions, which allows remote attackers to obtain sensitive information in opportunistic circumstances by leveraging an unintended correction. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html - http://www.securitytracker.com/id/1036797 - http://lists.apple.com/archives/security-announce/2016/Sep/msg00002.html - http://www.securityfocus.com/bid/
d/1036797 - http://lists.apple.com/archives/security-announce/2016/Sep/msg00002.html - http://www.securityfocus.com/bid/92932 - https://support.apple.com/HT207143
CVE ID: CVE-2016-4747 State: PUBLISHED Published: 2016-09-18T22:00:00 Last Updated: 2024-08-06T00:39:26.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mail in Apple iOS before 10 mishandles certificates, which makes it easier for man-in-the-middle attackers to discover mail credentials via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html - http://www.securitytracker.com/id/1036797 - http://lists.apple.com/archives/security-announce/2016/Sep/msg00002.html - http://www.securityfocus.com/bid/92932 - https://support.apple.com/HT207143
CVE ID: CVE-2016-4748 State: PUBLISHED Published: 2016-09-25T10:00:00 Last Updated: 2024-08-06T00:39:26.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: Perl in Apple OS X before 10.12 allows local users to bypass the taint-mode protection mechanism via a crafted environment variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036858 - http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html - http://www.securityfocus.com/bid/93055 - https://support.apple.com/HT207170
CVE ID: CVE-2016-4749 State: PUBLISHED Published: 2016-09-18T22:00:00 Last Updated: 2024-08-06T00:39:26.197Z Vendors: n/a Products: n/a Problem Types: n/a Description: Printing UIKit in Apple iOS before 10 mishandles environment variables, which allows local users to discover cleartext AirPrint preview content by reading a temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html - http://www.securitytracker.com/id/1036797 - http://lists.apple.com/archives/security-announce/2016/Sep/msg00002.html - http://www.securityfocus.com/bid/92932 - https://support.apple.com/HT207143
CVE ID: CVE-2016-4750 State: PUBLISHED Published: 2016-09-25T10:00:00 Last Updated: 2024-08-06T00:39:26.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: S2 Camera in Apple iOS before 10 and OS X before 10.12 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036858 - http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html - http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html - http://www.securityfocus.com/bid/93056 - https://support.apple.com/HT207170 - https
ty-announce/2016/Sep/msg00008.html - http://www.securityfocus.com/bid/93056 - https://support.apple.com/HT207170 - https://support.apple.com/HT207143
CVE ID: CVE-2016-4751 State: PUBLISHED Published: 2016-09-25T10:00:00 Last Updated: 2024-08-06T00:39:26.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Safari Tabs component in Apple Safari before 10 allows remote attackers to spoof the address bar of a tab via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT207157 - http://www.securityfocus.com/bid/93058 - http://www.securitytracker.com/id/1036854 - http://lists.apple.com/archives/security-announce/2016/Sep/msg00007.html
CVE ID: CVE-2016-4752 State: PUBLISHED Published: 2016-09-25T10:00:00 Last Updated: 2024-08-06T00:39:26.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SecKeyDeriveFromPassword function in Apple OS X before 10.12 does not use the CF_RETURNS_RETAINED keyword, which allows attackers to obtain sensitive information from process memory by triggering key derivation. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036858 - http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html - http://www.securityfocus.com/bid/93055 - https://support.apple.com/HT207170
CVE ID: CVE-2016-4753 State: PUBLISHED Published: 2016-09-25T10:00:00 Last Updated: 2024-08-06T00:39:26.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 mishandle signed disk images, which allows attackers to execute arbitrary code in a privileged context via a crafted app. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT207141 - http://www.securitytracker.com/id/1036858 - http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html - http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html - http://www.securityfocus.com/bid/9305
.html - http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html - http://www.securityfocus.com/bid/93059 - http://lists.apple.com/archives/security-announce/2016/Sep/msg00010.html - http://lists.apple.com/archives/security-announce/2016/Sep/msg00011.html - https://support.apple.com/HT207170 - https://support.apple.com/HT207142 - https://support.apple.com/HT207143
CVE ID: CVE-2016-4754 State: PUBLISHED Published: 2016-09-25T10:00:00 Last Updated: 2024-08-06T00:39:26.328Z Vendors: n/a Products: n/a Problem Types: n/a Description: ServerDocs Server in Apple OS X Server before 5.2 supports the RC4 cipher, which might allow remote attackers to defeat cryptographic protection mechanisms via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT207171 - http://www.securitytracker.com/id/1036853 - http://www.securityfocus.com/bid/93061 - http://lists.apple.com/archives/security-announce/2016/Sep/msg00009.html
CVE ID: CVE-2016-4755 State: PUBLISHED Published: 2016-09-25T10:00:00 Last Updated: 2024-08-06T00:39:26.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: Terminal in Apple OS X before 10.12 uses weak permissions for the .bash_history and .bash_session files, which allows local users to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036858 - http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html - http://www.securityfocus.com/bid/93055 - https://support.apple.com/HT207170
CVE ID: CVE-2016-4756 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-4757 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-4758 State: PUBLISHED Published: 2016-09-25T10:00:00 Last Updated: 2024-08-06T00:39:26.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit in Apple iOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 does not properly restrict access to the location variable, which allows remote attackers to obtain sensitive information via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://mksben.l0.cm/2016/09/safari-uxss-showModalDialog.html - http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html - https://support.apple.com/HT207157 - https://support.apple.com/HT207158 - http://www.securityfocus
6/Sep/msg00008.html - https://support.apple.com/HT207157 - https://support.apple.com/HT207158 - http://www.securityfocus.com/bid/93066 - http://www.securitytracker.com/id/1036854 - https://support.apple.com/HT207143 - http://lists.apple.com/archives/security-announce/2016/Sep/msg00012.html - http://lists.apple.com/archives/security-announce/2016/Sep/msg00007.html
CVE ID: CVE-2016-4759 State: PUBLISHED Published: 2016-09-25T10:00:00 Last Updated: 2024-08-06T00:39:26.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-4765, CVE-2016-4766, CVE-2016-4767, and CVE-2016-4768. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html - https://support.apple.com/HT207157 - https://support.apple.com/HT207158 -
ves/security-announce/2016/Sep/msg00008.html - https://support.apple.com/HT207157 - https://support.apple.com/HT207158 - http://www.securityfocus.com/bid/93067 - http://lists.apple.com/archives/security-announce/2016/Sep/msg00011.html - http://www.securitytracker.com/id/1036854 - https://support.apple.com/HT207142 - https://support.apple.com/HT207143 - http://lists.apple.com/archives/security-announce/2016/Sep/msg00012.html - http://lists.apple.com/archives/security-announce/2016/Sep/msg00007.html
CVE ID: CVE-2016-4760 State: PUBLISHED Published: 2016-09-25T10:00:00 Last Updated: 2024-08-06T00:39:26.069Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit in Apple iOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to conduct DNS rebinding attacks against non-HTTP Safari sessions by leveraging HTTP/0.9 support. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html - https://support.apple.com/HT207157 - https://support.apple.com/HT207158 - http://www.securityfocus.com/bid/93066 - http://www.securitytracker.com/id/1036854 - https://support.apple.com/
207158 - http://www.securityfocus.com/bid/93066 - http://www.securitytracker.com/id/1036854 - https://support.apple.com/HT207143 - http://lists.apple.com/archives/security-announce/2016/Sep/msg00012.html - http://lists.apple.com/archives/security-announce/2016/Sep/msg00007.html
CVE ID: CVE-2016-4761 State: PUBLISHED Published: 2020-01-22T18:51:46 Last Updated: 2024-08-06T00:39:26.037Z Vendors: WebKitGTK+ Products: WebKitGTK+ Problem Types: use-after-free Description: WebKitGTK+ before 2.14.0: A use-after-free vulnerability can allow remote attackers to cause a DoS Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2016/11/04/14 - http://www.ubuntu.com/usn/USN-3166-1
CVE ID: CVE-2016-4762 State: PUBLISHED Published: 2016-09-25T10:00:00 Last Updated: 2024-08-06T00:39:26.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit in Apple iOS before 10, iTunes before 12.5.1 on Windows, iCloud before 6.0 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html - https://support.apple.com/HT207157 - https://support.apple.com/HT207158 - http://www.securityfocus.com/bid/93066 - http://www.securitytracker.com/id/10368
- https://support.apple.com/HT207158 - http://www.securityfocus.com/bid/93066 - http://www.securitytracker.com/id/1036854 - http://lists.apple.com/archives/security-announce/2016/Sep/msg00013.html - https://support.apple.com/HT207147 - https://support.apple.com/HT207143 - http://lists.apple.com/archives/security-announce/2016/Sep/msg00012.html - http://lists.apple.com/archives/security-announce/2016/Sep/msg00007.html
CVE ID: CVE-2016-4763 State: PUBLISHED Published: 2016-09-25T10:00:00 Last Updated: 2024-08-06T00:39:26.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: WKWebView in WebKit in Apple iOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 does not properly verify X.509 certificates from HTTPS servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html - https://support.apple.com/HT207157 - https://support.apple.com/HT207158 - http://www.securityfocus.com/bid/93066
.html - https://support.apple.com/HT207157 - https://support.apple.com/HT207158 - http://www.securityfocus.com/bid/93066 - http://www.securitytracker.com/id/1036854 - https://support.apple.com/HT207143 - http://lists.apple.com/archives/security-announce/2016/Sep/msg00012.html - http://lists.apple.com/archives/security-announce/2016/Sep/msg00007.html
CVE ID: CVE-2016-4764 State: PUBLISHED Published: 2017-02-20T08:35:00 Last Updated: 2024-08-06T00:39:26.137Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in certain Apple products. iOS before 10 is affected. Safari before 10 is affected. iTunes before 12.5.1 is affected. tvOS before 10 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/HT207157 - http://www.securityfocus.com/bid/94430 - https://support.apple.com/HT
References: - https://support.apple.com/HT207157 - http://www.securityfocus.com/bid/94430 - https://support.apple.com/HT207158 - https://support.apple.com/HT207142 - https://support.apple.com/HT207143
CVE ID: CVE-2016-4765 State: PUBLISHED Published: 2016-09-25T10:00:00 Last Updated: 2024-08-06T00:39:26.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-4759, CVE-2016-4766, CVE-2016-4767, and CVE-2016-4768. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html - https://support.apple.com/HT207157 - https://support.apple.com/HT207158 -
ves/security-announce/2016/Sep/msg00008.html - https://support.apple.com/HT207157 - https://support.apple.com/HT207158 - http://lists.apple.com/archives/security-announce/2016/Sep/msg00011.html - http://www.securitytracker.com/id/1036854 - http://www.securityfocus.com/bid/93064 - https://support.apple.com/HT207142 - https://support.apple.com/HT207143 - http://lists.apple.com/archives/security-announce/2016/Sep/msg00012.html - http://lists.apple.com/archives/security-announce/2016/Sep/msg00007.html
CVE ID: CVE-2016-4766 State: PUBLISHED Published: 2016-09-25T10:00:00 Last Updated: 2024-08-06T00:39:26.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-4759, CVE-2016-4765, CVE-2016-4767, and CVE-2016-4768. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html - https://support.apple.com/HT207157 - https://support.apple.com/HT207158 -
CVE ID: CVE-2016-4767 State: PUBLISHED Published: 2016-09-25T10:00:00 Last Updated: 2024-08-06T00:39:26.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-4759, CVE-2016-4765, CVE-2016-4766, and CVE-2016-4768. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html - https://support.apple.com/HT207157 - https://support.apple.com/HT207158 -