Kernel vulnerabilities

41 known CVE vulnerabilities in Kernel, translated and rated.

CVE-2017-13876High
An issue was discovered in certain Apple products, including iOS before 11.2, macOS before 10.13.2, tvOS before 11.2, and watchOS before 4.2, involving the 'Kernel' component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVE-2017-13867High
An issue was discovered in certain Apple products related to the 'Kernel' component. Affects iOS before 11.2, macOS before 10.13.2, tvOS before 11.2, and watchOS before 4.2, allowing attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVE-2017-13862High
An issue was discovered in certain Apple products related to the 'Kernel' component. This affects iOS versions before 11.2, macOS versions before 10.13.2, tvOS versions before 11.2, and watchOS versions before 4.2.
CVE-2017-13843High
An issue was discovered in macOS before version 10.13.1 in the 'Kernel' component, allowing attackers to execute arbitrary code in a privileged context or cause a denial of service through memory corruption via a crafted app.
CVE-2017-13834High
An issue was discovered in macOS versions before 10.13.1 related to the 'Kernel' component. It allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted mach binary.
CVE-2017-13799High
An issue was discovered in certain Apple products related to the 'Kernel' component. Affects iOS before 11.1, macOS before 10.13.1, tvOS before 11.1, and watchOS before 4.1.
CVE-2017-7114High
An issue was discovered in certain Apple products related to the 'Kernel' component. Affects iOS before 11, macOS before 10.13, tvOS before 11, and watchOS before 4.
CVE-2017-7069High
An issue was discovered in certain Apple products related to the 'Kernel' component. Affects iOS before 10.3.3, macOS before 10.12.6, tvOS before 10.2.2, and watchOS before 3.2.3.
CVE-2017-7027High
An issue was discovered in certain Apple products related to the 'Kernel' component. It affects iOS versions before 10.3.3, macOS versions before 10.12.6, tvOS versions before 10.2.2, and watchOS versions before 3.2.3.
CVE-2017-7026High
An issue was discovered in certain Apple products affecting iOS before 10.3.3, macOS before 10.12.6, tvOS before 10.2.2, and watchOS before 3.2.3. The issue involves the 'Kernel' component and allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVE-2017-7025High
An issue was discovered in certain Apple products related to the 'Kernel' component. It affects iOS versions before 10.3.3, macOS versions before 10.12.6, tvOS versions before 10.2.2, and watchOS versions before 3.2.3.
CVE-2017-7024High
An issue was discovered in the 'Kernel' component of certain Apple products, allowing attackers to execute arbitrary code in a privileged context or cause a denial of service through memory corruption via a crafted app.
CVE-2017-7023High
An issue was discovered in certain Apple products related to the 'Kernel' component. This affects iOS versions before 10.3.3, macOS versions before 10.12.6, tvOS versions before 10.2.2, and watchOS versions before 3.2.3.
CVE-2017-7022High
An issue was discovered in the 'Kernel' component of certain Apple products, allowing attackers to execute arbitrary code in a privileged context or cause a denial of service through memory corruption via a crafted app. This affects iOS before 10.3.3, macOS before 10.12.6, tvOS before 10.2.2, and watchOS before 3.2.3.
CVE-2017-2546High
An issue was discovered in macOS before version 10.12.5 related to the 'Kernel' component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVE-2017-2501High
An issue was discovered in certain Apple products related to the 'Kernel' component. A race condition allows attackers to execute arbitrary code in a privileged context via a crafted app.
CVE-2017-2494High
An issue was discovered in macOS versions prior to 10.12.5 related to the 'Kernel' component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVE-2017-2490High
An issue was discovered in certain Apple products related to the 'Kernel' component. It affects iOS versions before 10.3, macOS before 10.12.4, tvOS before 10.2, and watchOS before 3.2, allowing attackers to execute arbitrary code in a privileged context or cause a denial of service via memory corruption.
CVE-2017-2483High
An issue was discovered in certain Apple products related to the 'Kernel' component. It affects iOS before 10.3, macOS before 10.12.4, tvOS before 10.2, and watchOS before 3.2. A buffer overflow allows attackers to execute arbitrary code in a privileged context.
CVE-2017-2482High
An issue was discovered in certain Apple products related to the 'Kernel' component. It affects iOS before 10.3, macOS before 10.12.4, tvOS before 10.2, and watchOS before 3.2. A buffer overflow allows attackers to execute arbitrary code in a privileged context.
CVE-2017-2478High
An issue was discovered in certain Apple products related to the 'Kernel' component. A race condition allows attackers to execute arbitrary code in a privileged context via a crafted app.
CVE-2017-2474High
An issue was discovered in certain Apple products related to the 'Kernel' component. An off-by-one error allows attackers to execute arbitrary code in a privileged context via a crafted app.
CVE-2017-2473High
An issue was discovered in the 'Kernel' component of certain Apple products, allowing attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. Affected versions include iOS before 10.3, macOS before 10.12.4, tvOS before 10.2, and watchOS before 3.2.
CVE-2017-2472High
An issue was discovered in certain Apple products, including iOS before 10.3, macOS before 10.12.4, tvOS before 10.2, and watchOS before 3.2, involving the 'Kernel' component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (use-after-free) via a crafted app.
CVE-2017-2456High
An issue was discovered in certain Apple products related to the 'Kernel' component. A race condition allows attackers to execute arbitrary code in a privileged context via a crafted app.
CVE-2017-2440High
An issue was discovered in certain Apple products, including iOS before 10.3, macOS before 10.12.4, tvOS before 10.2, and watchOS before 3.2, involving the 'Kernel' component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (integer overflow) via a crafted app.
CVE-2017-2410High
An issue was discovered in macOS versions before 10.12.4 related to the 'Kernel' component. It allows attackers to execute arbitrary code in a privileged context.
CVE-2017-2401High
An issue was discovered in certain Apple products related to the 'Kernel' component. This affects iOS versions before 10.3, macOS versions before 10.12.4, tvOS versions before 10.2, and watchOS versions before 3.2.
CVE-2017-2398High
An issue was discovered in certain Apple products, including iOS before 10.3 and macOS before 10.12.4, related to the 'Kernel' component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVE-2017-2370High
An issue was discovered in certain Apple products related to the 'Kernel' component. Affected systems include iOS before 10.2.1, macOS before 10.12.3, tvOS before 10.1.1, and watchOS before 3.1.3. This issue allows attackers to execute arbitrary code in a privileged context or cause a denial of service (buffer overflow) via a crafted app.
CVE-2017-2360High
An issue was discovered in certain Apple products related to the 'Kernel' component. iOS versions before 10.2.1, macOS before 10.12.3, tvOS before 10.1.1, and watchOS before 3.1.3 are vulnerable to attacks that can lead to arbitrary code execution in a privileged context or denial of service (use-after-free) via a crafted app.
CVE-2016-7644High
An issue was discovered in certain Apple products affecting iOS before 10.2, macOS before 10.12.2, and watchOS before 3.1.3. The issue involves the 'Kernel' component and allows attackers to execute arbitrary code in a privileged context or cause a denial of service (use-after-free) via a crafted app.
CVE-2016-7637High
An issue was discovered in certain Apple products affecting iOS before 10.2, macOS before 10.12.2, and watchOS before 3.1.3. The issue involves the 'Kernel' component and allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2016-7621High
An issue was discovered in certain Apple products affecting iOS before 10.2, macOS before 10.12.2, and watchOS before 3.1.3. The issue involves the 'Kernel' component and allows local users to execute arbitrary code in a privileged context or cause a denial of service (use-after-free) via unspecified vectors.
CVE-2016-7613High
An issue was discovered in certain Apple products related to the 'Kernel' component. It affects iOS versions before 10.1, macOS versions before 10.12.1, tvOS versions before 10.0.1, and watchOS versions before 3.1. The issue allows attackers to execute arbitrary code in a privileged context.
CVE-2016-7612High
An issue was discovered in certain Apple products related to the 'Kernel' component. Affects iOS versions before 10.2, macOS versions before 10.12.2, and watchOS versions before 3.1.3. This issue allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVE-2016-7606High
An issue was discovered in certain Apple products affecting iOS before 10.2, macOS before 10.12.2, and watchOS before 3.1.3. The issue involves the 'Kernel' component and allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVE-2016-4669High
An issue was discovered in certain Apple products, including iOS before 10.1, macOS before 10.12.1, tvOS before 10.0.1, and watchOS before 3.1, related to the 'Kernel' component. It allows local users to execute arbitrary code in a privileged context or cause a denial of service via unspecified vectors.
CVE-2017-0403High
CVE-2017-0403 describes an elevation of privilege vulnerability in the kernel performance subsystem that allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as High because it requires compromising a privileged process first.
CVE-2016-8399High
A vulnerability in the kernel networking subsystem allows a local malicious application to execute arbitrary code within the context of the kernel. It requires first compromising a privileged process, which mitigates the risk.
CVE-2023-3107High
A set of carefully crafted ipv6 packets can trigger an integer overflow in the calculation of a fragment reassembled packet's payload length field. This allows an attacker to trigger a kernel panic, resulting in a denial of service.