>> CATEGORY: Apple

Apple Security Advisory 2017-03-27-3 – macOS Sierra 10.12.4, Security Update 2017-001 El Capitan, and Security Update 2017-001 Yosemite are now available and address multiple vulnerabilities.

Apple Security Advisory 2017-03-27-4 – iOS 10.3 is now available and addresses code execution, information disclosure, denial of service, and various other vulnerabilities.

Apple Security Advisory 2017-03-27-7 – macOS Server 5.3 is now available and addresses denial of service and user enumeration vulnerabilities.

Apple Security Advisory 2017-03-28-1 – iCloud for Windows 6.2 is now available and addresses information disclosure, memory corruption, and various other vulnerabilities.

Apple Security Advisory 2017-03-28-2 – This advisory provides additional information for APPLE-SA-2017-03-22-1. iTunes for Windows 12.6 addresses multiple vulnerabilities in various included software.

Apple Security Advisory 2017-04-03-1 – iOS 10.3.1 is now available and addresses a wifi vulnerability.

Apple WebKit suffered from a cross site scripting vulnerability in Frame::setDocument (1).

Apple Webkit suffered from a cross site scripting vulnerability when accessing a named property from an unloaded window.

Apple WebKit suffered from a cross site scripting vulnerability with JSCallbackData.

Apple WebKit suffered from a cross site scripting vulnerability via disconnectSubframes.