Kernel vulnerabilities

An issue was discovered in certain Apple products, including iOS before 11.2, macOS before 10.13.2, tvOS before 11.2, and watchOS before 4.2, involving the 'Kernel' component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

An issue was discovered in certain Apple products related to the 'Kernel' component. Affects iOS before 11.2, macOS before 10.13.2, tvOS before 11.2, and watchOS before 4.2, allowing attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

An issue was discovered in certain Apple products related to the 'Kernel' component. This affects iOS versions before 11.2, macOS versions before 10.13.2, tvOS versions before 11.2, and watchOS versions before 4.2.

An issue was discovered in macOS before version 10.13.1 in the 'Kernel' component, allowing attackers to execute arbitrary code in a privileged context or cause a denial of service through memory corruption via a crafted app.

An issue was discovered in macOS versions before 10.13.1 related to the 'Kernel' component. It allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted mach binary.

An issue was discovered in certain Apple products related to the 'Kernel' component. Affects iOS before 11.1, macOS before 10.13.1, tvOS before 11.1, and watchOS before 4.1.

An issue was discovered in certain Apple products related to the 'Kernel' component. Affects iOS before 11, macOS before 10.13, tvOS before 11, and watchOS before 4.

An issue was discovered in certain Apple products related to the 'Kernel' component. Affects iOS before 10.3.3, macOS before 10.12.6, tvOS before 10.2.2, and watchOS before 3.2.3.

An issue was discovered in certain Apple products related to the 'Kernel' component. It affects iOS versions before 10.3.3, macOS versions before 10.12.6, tvOS versions before 10.2.2, and watchOS versions before 3.2.3.

An issue was discovered in certain Apple products affecting iOS before 10.3.3, macOS before 10.12.6, tvOS before 10.2.2, and watchOS before 3.2.3. The issue involves the 'Kernel' component and allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

An issue was discovered in certain Apple products related to the 'Kernel' component. It affects iOS versions before 10.3.3, macOS versions before 10.12.6, tvOS versions before 10.2.2, and watchOS versions before 3.2.3.

An issue was discovered in the 'Kernel' component of certain Apple products, allowing attackers to execute arbitrary code in a privileged context or cause a denial of service through memory corruption via a crafted app.

An issue was discovered in certain Apple products related to the 'Kernel' component. This affects iOS versions before 10.3.3, macOS versions before 10.12.6, tvOS versions before 10.2.2, and watchOS versions before 3.2.3.

An issue was discovered in the 'Kernel' component of certain Apple products, allowing attackers to execute arbitrary code in a privileged context or cause a denial of service through memory corruption via a crafted app. This affects iOS before 10.3.3, macOS before 10.12.6, tvOS before 10.2.2, and watchOS before 3.2.3.

An issue was discovered in macOS before version 10.12.5 related to the 'Kernel' component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

An issue was discovered in certain Apple products related to the 'Kernel' component. A race condition allows attackers to execute arbitrary code in a privileged context via a crafted app.

An issue was discovered in macOS versions prior to 10.12.5 related to the 'Kernel' component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

An issue was discovered in certain Apple products related to the 'Kernel' component. It affects iOS versions before 10.3, macOS before 10.12.4, tvOS before 10.2, and watchOS before 3.2, allowing attackers to execute arbitrary code in a privileged context or cause a denial of service via memory corruption.

An issue was discovered in certain Apple products related to the 'Kernel' component. It affects iOS before 10.3, macOS before 10.12.4, tvOS before 10.2, and watchOS before 3.2. A buffer overflow allows attackers to execute arbitrary code in a privileged context.

An issue was discovered in certain Apple products related to the 'Kernel' component. It affects iOS before 10.3, macOS before 10.12.4, tvOS before 10.2, and watchOS before 3.2. A buffer overflow allows attackers to execute arbitrary code in a privileged context.

An issue was discovered in certain Apple products related to the 'Kernel' component. A race condition allows attackers to execute arbitrary code in a privileged context via a crafted app.

An issue was discovered in certain Apple products related to the 'Kernel' component. An off-by-one error allows attackers to execute arbitrary code in a privileged context via a crafted app.

An issue was discovered in the 'Kernel' component of certain Apple products, allowing attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. Affected versions include iOS before 10.3, macOS before 10.12.4, tvOS before 10.2, and watchOS before 3.2.

An issue was discovered in certain Apple products, including iOS before 10.3, macOS before 10.12.4, tvOS before 10.2, and watchOS before 3.2, involving the 'Kernel' component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (use-after-free) via a crafted app.

An issue was discovered in certain Apple products related to the 'Kernel' component. A race condition allows attackers to execute arbitrary code in a privileged context via a crafted app.

An issue was discovered in certain Apple products, including iOS before 10.3, macOS before 10.12.4, tvOS before 10.2, and watchOS before 3.2, involving the 'Kernel' component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (integer overflow) via a crafted app.

An issue was discovered in macOS versions before 10.12.4 related to the 'Kernel' component. It allows attackers to execute arbitrary code in a privileged context.

An issue was discovered in certain Apple products related to the 'Kernel' component. This affects iOS versions before 10.3, macOS versions before 10.12.4, tvOS versions before 10.2, and watchOS versions before 3.2.

An issue was discovered in certain Apple products, including iOS before 10.3 and macOS before 10.12.4, related to the 'Kernel' component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

An issue was discovered in certain Apple products related to the 'Kernel' component. Affected systems include iOS before 10.2.1, macOS before 10.12.3, tvOS before 10.1.1, and watchOS before 3.1.3. This issue allows attackers to execute arbitrary code in a privileged context or cause a denial of service (buffer overflow) via a crafted app.

An issue was discovered in certain Apple products related to the 'Kernel' component. iOS versions before 10.2.1, macOS before 10.12.3, tvOS before 10.1.1, and watchOS before 3.1.3 are vulnerable to attacks that can lead to arbitrary code execution in a privileged context or denial of service (use-after-free) via a crafted app.

An issue was discovered in certain Apple products affecting iOS before 10.2, macOS before 10.12.2, and watchOS before 3.1.3. The issue involves the 'Kernel' component and allows attackers to execute arbitrary code in a privileged context or cause a denial of service (use-after-free) via a crafted app.

An issue was discovered in certain Apple products affecting iOS before 10.2, macOS before 10.12.2, and watchOS before 3.1.3. The issue involves the 'Kernel' component and allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.

An issue was discovered in certain Apple products affecting iOS before 10.2, macOS before 10.12.2, and watchOS before 3.1.3. The issue involves the 'Kernel' component and allows local users to execute arbitrary code in a privileged context or cause a denial of service (use-after-free) via unspecified vectors.

An issue was discovered in certain Apple products related to the 'Kernel' component. It affects iOS versions before 10.1, macOS versions before 10.12.1, tvOS versions before 10.0.1, and watchOS versions before 3.1. The issue allows attackers to execute arbitrary code in a privileged context.

An issue was discovered in certain Apple products related to the 'Kernel' component. Affects iOS versions before 10.2, macOS versions before 10.12.2, and watchOS versions before 3.1.3. This issue allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

An issue was discovered in certain Apple products affecting iOS before 10.2, macOS before 10.12.2, and watchOS before 3.1.3. The issue involves the 'Kernel' component and allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

An issue was discovered in certain Apple products, including iOS before 10.1, macOS before 10.12.1, tvOS before 10.0.1, and watchOS before 3.1, related to the 'Kernel' component. It allows local users to execute arbitrary code in a privileged context or cause a denial of service via unspecified vectors.

CVE-2017-0403 describes an elevation of privilege vulnerability in the kernel performance subsystem that allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as High because it requires compromising a privileged process first.

A vulnerability in the kernel networking subsystem allows a local malicious application to execute arbitrary code within the context of the kernel. It requires first compromising a privileged process, which mitigates the risk.

The vulnerability causes memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.

The kernel fails to check the connection state of sockets when adding them to load-balancing groups with SO_REUSEPORT_LB. A socket in such a group may receive packets from any host, violating the connect(2) contract and exposing the application to spoofing attacks.

A set of carefully crafted ipv6 packets can trigger an integer overflow in the calculation of a fragment reassembled packet's payload length field. This allows an attacker to trigger a kernel panic, resulting in a denial of service.