2016 CVE Vulnerabilities

10,647 CVEs published in 2016.

CVE IDSeverityCVSSDescription
CVE-2016-1779WebKit in Apple iOS before 9.3 and Safari before 9.1 allows remote attackers to bypass the Same Origin Policy and obtain...
CVE-2016-1778WebKit in Apple iOS before 9.3 and Safari before 9.1 allows remote attackers to execute arbitrary code or cause a denial...
CVE-2016-1777Web Server in Apple OS X Server before 5.1 supports the RC4 algorithm, which makes it easier for remote attackers to def...
CVE-2016-1776Web Server in Apple OS X Server before 5.1 does not properly restrict access to .DS_Store and .htaccess files, which all...
CVE-2016-1775TrueTypeScaler in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows remote attac...
CVE-2016-1774The Time Machine server in Server App in Apple OS X Server before 5.1 does not notify the user about ignored permissions...
CVE-2016-1773The code-signing subsystem in Apple OS X before 10.11.4 does not properly verify file ownership, which allows local user...
CVE-2016-1772The Top Sites feature in Apple Safari before 9.1 mishandles cookie storage, which makes it easier for remote web servers...
CVE-2016-1771The Downloads feature in Apple Safari before 9.1 mishandles file expansion, which allows remote attackers to cause a den...
CVE-2016-1770The Reminders component in Apple OS X before 10.11.4 allows attackers to bypass an intended user-confirmation requiremen...
CVE-2016-1769QuickTime in Apple OS X before 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service (m...
CVE-2016-1768QuickTime in Apple OS X before 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service (m...
CVE-2016-1767QuickTime in Apple OS X before 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service (m...
CVE-2016-1766The Profiles component in Apple iOS before 9.3 does not properly validate certificates, which allows attackers to spoof ...
CVE-2016-1765otool in Apple Xcode before 7.3 allows local users to gain privileges or cause a denial of service (memory corruption an...
CVE-2016-1764The Content Security Policy (CSP) implementation in Messages in Apple OS X before 10.11.4 allows remote attackers to obt...
CVE-2016-1763Messages in Apple iOS before 9.3 does not ensure that an auto-fill action applies to the intended message thread, which ...
CVE-2016-1762HIGH8.1The xmlNextChar function in libxml2 before 2.9.4 allows remote attackers to cause a denial of service (heap-based buffer...
CVE-2016-1761libxml2 in Apple iOS before 9.3, OS X before 10.11.4, and watchOS before 2.2 allows remote attackers to execute arbitrar...
CVE-2016-1759The kernel in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a de...
CVE-2016-1758The kernel in Apple iOS before 9.3 and OS X before 10.11.4 allows attackers to obtain sensitive memory-layout informatio...
CVE-2016-1757Race condition in the kernel in Apple iOS before 9.3 and OS X before 10.11.4 allows attackers to execute arbitrary code ...
CVE-2016-1756The kernel in Apple iOS before 9.3 and OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged co...
CVE-2016-1755The kernel in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows attackers to exe...
CVE-2016-1754The kernel in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows attackers to exe...

Check if your code is affected by 2016 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now