Vulnerabilities > Improper Restriction of Operations within the Bounds of a Memory Buffer

DATE CVE VULNERABILITY TITLE RISK
2016-09-25 CVE-2016-4750 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Apple Iphone OS
S2 Camera in Apple iOS before 10 and OS X before 10.12 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
local
low complexity
apple CWE-119
7.8
2016-09-25 CVE-2016-4738 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products
libxslt in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
network
low complexity
apple debian CWE-119
8.8
2016-09-25 CVE-2016-4737 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Apple products
WebKit in Apple iOS before 10, Safari before 10, tvOS before 10, and watchOS before 3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
network
low complexity
apple CWE-119
8.8
2016-09-25 CVE-2016-4736 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Apple mac OS X
libarchive in Apple OS X before 10.12 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted file.
network
low complexity
apple CWE-119
8.8
2016-09-25 CVE-2016-4735 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Apple Tvos
WebKit in Apple iOS before 10, Safari before 10, and tvOS before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-4611, CVE-2016-4730, CVE-2016-4733, and CVE-2016-4734.
network
low complexity
apple CWE-119
8.8
2016-09-25 CVE-2016-4734 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Apple Tvos
WebKit in Apple iOS before 10, Safari before 10, and tvOS before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-4611, CVE-2016-4730, CVE-2016-4733, and CVE-2016-4735.
network
low complexity
apple CWE-119
critical
9.6
2016-09-25 CVE-2016-4733 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Apple Tvos
WebKit in Apple iOS before 10, Safari before 10, and tvOS before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-4611, CVE-2016-4730, CVE-2016-4734, and CVE-2016-4735.
local
low complexity
apple CWE-119
7.8
2016-09-25 CVE-2016-4731 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Apple Safari
WebKit in Apple iOS before 10 and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-4729.
network
low complexity
apple CWE-119
8.8
2016-09-25 CVE-2016-4730 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Apple Iphone OS
WebKit in Apple iOS before 10, Safari before 10, and tvOS before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-4611, CVE-2016-4733, CVE-2016-4734, and CVE-2016-4735.
network
low complexity
apple CWE-119
8.8
2016-09-25 CVE-2016-4729 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Apple Safari
WebKit in Apple iOS before 10 and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-4731.
network
low complexity
apple CWE-119
8.8