Security vulnerabilities
8 known CVE vulnerabilities in Security, translated and rated.
- CVE-2017-7080High
An issue was discovered in certain Apple products affecting iOS before 11, macOS before 10.13, tvOS before 11, and watchOS before 4. The issue involves the 'Security' component and allows remote attackers to bypass intended certificate-trust restrictions via a revoked X.509 certificate.
- CVE-2017-2535High
An issue was discovered in certain Apple products, including macOS before 10.12.5, in the 'Security' component. It allows attackers to conduct sandbox-escape attacks or cause a denial of service via a crafted app.
- CVE-2017-2498High
An issue was discovered in certain Apple products, including iOS before 10.3.2, related to the 'Security' component. It allows attackers to bypass intended access restrictions via an untrusted certificate.
- CVE-2017-2485High
An issue was discovered in certain Apple products related to the 'Security' component. It affects iOS before 10.3, macOS before 10.12.4, tvOS before 10.2, and watchOS before 3.2. The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted X.509 certificate file.
- CVE-2017-2451High
An issue was discovered in certain Apple products affecting iOS before 10.3, macOS before 10.12.4, tvOS before 10.2, and watchOS before 3.2. The issue involves the 'Security' component and allows attackers to execute arbitrary code in a privileged context or cause a denial of service (buffer overflow) via a crafted app.
- CVE-2016-7662High
An issue was discovered in certain Apple products affecting iOS before 10.2, macOS before 10.12.2, and watchOS before 3.1.3. The issue involves the 'Security' component, allowing remote attackers to spoof certificates via unspecified vectors.
- CVE-2017-2423Critical
An issue was discovered in certain Apple products affecting iOS before 10.3 and macOS before 10.12.4. The issue involves the 'Security' component and allows remote attackers to bypass intended access restrictions.
- CVE-2026-46851High
Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle, affecting the security component. It allows an unauthenticated attacker with network access via HTTP to take control of the system.

