Latest CVE Feed
-
8.8
HIGHCVE-2016-5171
WebKit/Source/bindings/templates/interface.cpp in Blink, as used in Google Chrome before 53.0.2785.113, does not prevent certain constructor calls, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified ot... Read more
Affected Products : chrome- EPSS Score: %0.73
- Published: Sep. 25, 2016
- Modified: Apr. 12, 2025
-
8.8
HIGHCVE-2016-5170
WebKit/Source/bindings/modules/v8/V8BindingForModules.cpp in Blink, as used in Google Chrome before 53.0.2785.113, does not properly consider getter side effects during array key conversion, which allows remote attackers to cause a denial of service (use-... Read more
Affected Products : chrome- EPSS Score: %0.73
- Published: Sep. 25, 2016
- Modified: Apr. 12, 2025
-
8.8
HIGHCVE-2016-5169
Format string vulnerability in Google Chrome OS before 53.0.2785.103 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.... Read more
Affected Products : chrome_os- EPSS Score: %0.58
- Published: Sep. 25, 2016
- Modified: Apr. 12, 2025
-
7.8
HIGHCVE-2016-4779
Apple Type Services (ATS) in Apple OS X before 10.12 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file.... Read more
- EPSS Score: %0.68
- Published: Sep. 25, 2016
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2016-4778
The kernel in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.... Read more
- EPSS Score: %0.26
- Published: Sep. 25, 2016
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2016-4777
The kernel in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (invalid pointer dereference) via a crafted app.... Read more
- EPSS Score: %0.26
- Published: Sep. 25, 2016
- Modified: Apr. 12, 2025
-
7.1
HIGHCVE-2016-4776
The kernel in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows attackers to obtain sensitive memory-layout information or cause a denial of service (out-of-bounds read) via a crafted app, a different vulnerability than C... Read more
- EPSS Score: %0.20
- Published: Sep. 25, 2016
- Modified: Apr. 12, 2025
-
7.8
HIGHCVE-2016-4775
The kernel in Apple OS X before 10.12, tvOS before 10, and watchOS before 3 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.... Read more
- EPSS Score: %0.06
- Published: Sep. 25, 2016
- Modified: Apr. 12, 2025
-
7.1
HIGHCVE-2016-4774
The kernel in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows attackers to obtain sensitive memory-layout information or cause a denial of service (out-of-bounds read) via a crafted app, a different vulnerability than C... Read more
- EPSS Score: %0.20
- Published: Sep. 25, 2016
- Modified: Apr. 12, 2025
-
7.1
HIGHCVE-2016-4773
The kernel in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows attackers to obtain sensitive memory-layout information or cause a denial of service (out-of-bounds read) via a crafted app, a different vulnerability than C... Read more
- EPSS Score: %0.20
- Published: Sep. 25, 2016
- Modified: Apr. 12, 2025
-
7.5
HIGHCVE-2016-4772
The kernel in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows remote attackers to cause a denial of service (unintended lock) via unspecified vectors.... Read more
- EPSS Score: %3.18
- Published: Sep. 25, 2016
- Modified: Apr. 12, 2025
-
5.5
MEDIUMCVE-2016-4771
The kernel in Apple iOS before 10 and OS X before 10.12 allows local users to bypass intended file-access restrictions via a crafted directory pathname.... Read more
- EPSS Score: %0.21
- Published: Sep. 25, 2016
- Modified: Apr. 12, 2025
-
8.8
HIGHCVE-2016-4769
WebKit in Apple iTunes before 12.5.1 on Windows and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.... Read more
- EPSS Score: %0.70
- Published: Sep. 25, 2016
- Modified: Apr. 12, 2025
-
8.8
HIGHCVE-2016-4768
WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than ... Read more
- EPSS Score: %0.98
- Published: Sep. 25, 2016
- Modified: Apr. 12, 2025
-
8.8
HIGHCVE-2016-4767
WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than ... Read more
- EPSS Score: %0.98
- Published: Sep. 25, 2016
- Modified: Apr. 12, 2025
-
8.8
HIGHCVE-2016-4766
WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than ... Read more
- EPSS Score: %0.91
- Published: Sep. 25, 2016
- Modified: Apr. 12, 2025
-
8.8
HIGHCVE-2016-4765
WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than ... Read more
- EPSS Score: %0.98
- Published: Sep. 25, 2016
- Modified: Apr. 12, 2025
-
6.8
MEDIUMCVE-2016-4763
WKWebView in WebKit in Apple iOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 does not properly verify X.509 certificates from HTTPS servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information vi... Read more
- EPSS Score: %0.23
- Published: Sep. 25, 2016
- Modified: Apr. 12, 2025
-
8.8
HIGHCVE-2016-4762
WebKit in Apple iOS before 10, iTunes before 12.5.1 on Windows, iCloud before 6.0 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.... Read more
- EPSS Score: %0.71
- Published: Sep. 25, 2016
- Modified: Apr. 12, 2025
-
6.5
MEDIUMCVE-2016-4760
WebKit in Apple iOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to conduct DNS rebinding attacks against non-HTTP Safari sessions by leveraging HTTP/0.9 support.... Read more
- EPSS Score: %1.07
- Published: Sep. 25, 2016
- Modified: Apr. 12, 2025