# CVEs published 2016-07-22 68 CVEs were published on July 22, 2016: 0 critical, 0 high. Days are UTC. - [CVE-2016-5743](https://cve.now/CVE-2016-5743.md): Siemens SIMATIC WinCC before 7.3 Update 10 and 7.4 before Update 1, SIMATIC BATCH before 8.1 SP1 Update 9 as distributed in SIMATIC PCS 7 th (no CVSS) - [CVE-2016-5744](https://cve.now/CVE-2016-5744.md): Siemens SIMATIC WinCC 7.0 through SP3 and 7.2 allows remote attackers to read arbitrary WinCC station files via crafted packets. (no CVSS) - [CVE-2016-5874](https://cve.now/CVE-2016-5874.md): Siemens SIMATIC NET PC-Software before 13 SP2 allows remote attackers to cause a denial of service (OPC UA service outage) via crafted TCP p (no CVSS) - [CVE-2016-6204](https://cve.now/CVE-2016-6204.md): Cross-site scripting (XSS) vulnerability in the integrated web server in Siemens SINEMA Remote Connect Server before 1.2 allows remote attac (no CVSS) - [CVE-2015-8946](https://cve.now/CVE-2015-8946.md): ecryptfs-setup-swap in eCryptfs before 111 does not prevent the unencrypted swap partition from activating during boot when using GPT partit (no CVSS) - [CVE-2016-6224](https://cve.now/CVE-2016-6224.md): ecryptfs-setup-swap in eCryptfs does not prevent the unencrypted swap partition from activating during boot when using GPT partitioning on a (no CVSS) - [CVE-2014-9862](https://cve.now/CVE-2014-9862.md): Integer signedness error in bspatch.c in bspatch in bsdiff, as used in Apple OS X before 10.11.6 and other products, allows remote attackers (no CVSS) - [CVE-2016-1863](https://cve.now/CVE-2016-1863.md): The kernel in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows local users to gain privileges (no CVSS) - [CVE-2016-1865](https://cve.now/CVE-2016-1865.md): The kernel in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows local users to cause a denial (no CVSS) - [CVE-2016-4582](https://cve.now/CVE-2016-4582.md): The kernel in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows local users to gain privileges (no CVSS) - [CVE-2016-4583](https://cve.now/CVE-2016-4583.md): WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to bypass the Same Origin Policy and ob (no CVSS) - [CVE-2016-4584](https://cve.now/CVE-2016-4584.md): The WebKit Page Loading implementation in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to exec (no CVSS) - [CVE-2016-4585](https://cve.now/CVE-2016-4585.md): Cross-site scripting (XSS) vulnerability in the WebKit Page Loading implementation in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS (no CVSS) - [CVE-2016-4586](https://cve.now/CVE-2016-4586.md): WebKit in Apple Safari before 9.1.2 and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (me (no CVSS) - [CVE-2016-4587](https://cve.now/CVE-2016-4587.md): WebKit in Apple iOS before 9.3.3 and tvOS before 9.2.2 allows remote attackers to obtain sensitive information from uninitialized process me (no CVSS) - [CVE-2016-4588](https://cve.now/CVE-2016-4588.md): WebKit in Apple tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a c (no CVSS) - [CVE-2016-4589](https://cve.now/CVE-2016-4589.md): WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a de (no CVSS) - [CVE-2016-4590](https://cve.now/CVE-2016-4590.md): WebKit in Apple iOS before 9.3.3 and Safari before 9.1.2 mishandles about: URLs, which allows remote attackers to bypass the Same Origin Pol (no CVSS) - [CVE-2016-4591](https://cve.now/CVE-2016-4591.md): WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 mishandles the location variable, which allows remote attackers (no CVSS) - [CVE-2016-4592](https://cve.now/CVE-2016-4592.md): WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to cause a denial of service (memory co (no CVSS) - [CVE-2016-4593](https://cve.now/CVE-2016-4593.md): The Siri Contacts component in Apple iOS before 9.3.3 allows physically proximate attackers to read arbitrary Contact card information via u (no CVSS) - [CVE-2016-4594](https://cve.now/CVE-2016-4594.md): The Sandbox Profiles component in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows attackers (no CVSS) - [CVE-2016-4595](https://cve.now/CVE-2016-4595.md): Safari Login AutoFill in Apple OS X before 10.11.6 allows physically proximate attackers to discover passwords by reading the screen during (no CVSS) - [CVE-2016-4596](https://cve.now/CVE-2016-4596.md): QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) vi (no CVSS) - [CVE-2016-4597](https://cve.now/CVE-2016-4597.md): QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) vi (no CVSS) - [CVE-2016-4598](https://cve.now/CVE-2016-4598.md): QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) vi (no CVSS) - [CVE-2016-4599](https://cve.now/CVE-2016-4599.md): QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) vi (no CVSS) - [CVE-2016-4600](https://cve.now/CVE-2016-4600.md): QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) vi (no CVSS) - [CVE-2016-4601](https://cve.now/CVE-2016-4601.md): QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) vi (no CVSS) - [CVE-2016-4602](https://cve.now/CVE-2016-4602.md): QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) vi (no CVSS) - [CVE-2016-4603](https://cve.now/CVE-2016-4603.md): Web Media in Apple iOS before 9.3.3 allows attackers to bypass the Private Browsing protection mechanism and obtain sensitive video URL info (no CVSS) - [CVE-2016-4604](https://cve.now/CVE-2016-4604.md): Safari in Apple iOS before 9.3.3 allows remote attackers to spoof the displayed URL via an HTTP response specifying redirection to an invali (no CVSS) - [CVE-2016-4605](https://cve.now/CVE-2016-4605.md): Calendar in Apple iOS before 9.3.3 allows remote attackers to cause a denial of service (NULL pointer dereference and device restart) via a (no CVSS) - [CVE-2016-4607](https://cve.now/CVE-2016-4607.md): libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, (no CVSS) - [CVE-2016-4608](https://cve.now/CVE-2016-4608.md): libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, (no CVSS) - [CVE-2016-4609](https://cve.now/CVE-2016-4609.md): libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, (no CVSS) - [CVE-2016-4610](https://cve.now/CVE-2016-4610.md): libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, (no CVSS) - [CVE-2016-4614](https://cve.now/CVE-2016-4614.md): libxml2 in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, (no CVSS) - [CVE-2016-4615](https://cve.now/CVE-2016-4615.md): libxml2 in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, (no CVSS) - [CVE-2016-4616](https://cve.now/CVE-2016-4616.md): libxml2 in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, (no CVSS) - [CVE-2016-4621](https://cve.now/CVE-2016-4621.md): libc++abi in Apple OS X before 10.11.6 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memo (no CVSS) - [CVE-2016-4622](https://cve.now/CVE-2016-4622.md): WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a de (no CVSS) - [CVE-2016-4623](https://cve.now/CVE-2016-4623.md): WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a de (no CVSS) - [CVE-2016-4624](https://cve.now/CVE-2016-4624.md): WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a de (no CVSS) - [CVE-2016-4625](https://cve.now/CVE-2016-4625.md): Use-after-free vulnerability in IOSurface in Apple OS X before 10.11.6 allows local users to gain privileges via unspecified vectors. (no CVSS) - [CVE-2016-4626](https://cve.now/CVE-2016-4626.md): IOHIDFamily in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows local users to gain privilege (no CVSS) - [CVE-2016-4627](https://cve.now/CVE-2016-4627.md): IOAcceleratorFamily in Apple iOS before 9.3.3, tvOS before 9.2.2, and watchOS before 2.2.2 allows local users to gain privileges or cause a (no CVSS) - [CVE-2016-4628](https://cve.now/CVE-2016-4628.md): IOAcceleratorFamily in Apple iOS before 9.3.3 and watchOS before 2.2.2 allows local users to obtain sensitive information from kernel memory (no CVSS) - [CVE-2016-4629](https://cve.now/CVE-2016-4629.md): ImageIO in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (no CVSS) - [CVE-2016-4630](https://cve.now/CVE-2016-4630.md): ImageIO in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (no CVSS) - [CVE-2016-4631](https://cve.now/CVE-2016-4631.md): ImageIO in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to execute arbit (no CVSS) - [CVE-2016-4632](https://cve.now/CVE-2016-4632.md): ImageIO in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denia (no CVSS) - [CVE-2016-4633](https://cve.now/CVE-2016-4633.md): Intel Graphics Driver in Apple OS X before 10.11.6 allows attackers to execute arbitrary code in a privileged context or cause a denial of s (no CVSS) - [CVE-2016-4634](https://cve.now/CVE-2016-4634.md): The Graphics Drivers subsystem in Apple OS X before 10.11.6 allows local users to gain privileges or cause a denial of service (memory corru (no CVSS) - [CVE-2016-4635](https://cve.now/CVE-2016-4635.md): FaceTime in Apple iOS before 9.3.3 and OS X before 10.11.6 allows man-in-the-middle attackers to spoof relayed-call termination, and obtain (no CVSS) - [CVE-2016-4637](https://cve.now/CVE-2016-4637.md): CoreGraphics in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to execute (no CVSS) - [CVE-2016-4638](https://cve.now/CVE-2016-4638.md): Login Window in Apple OS X before 10.11.6 allows attackers to gain privileges via a crafted app that leverages a "type confusion." (no CVSS) - [CVE-2016-4639](https://cve.now/CVE-2016-4639.md): Login Window in Apple OS X before 10.11.6 does not properly initialize memory, which allows local users to cause a denial of service via uns (no CVSS) - [CVE-2016-4640](https://cve.now/CVE-2016-4640.md): Login Window in Apple OS X before 10.11.6 allows attackers to execute arbitrary code in a privileged context, obtain sensitive user informat (no CVSS) - [CVE-2016-4641](https://cve.now/CVE-2016-4641.md): Login Window in Apple OS X before 10.11.6 allows attackers to execute arbitrary code in a privileged context or obtain sensitive user inform (no CVSS) - [CVE-2016-4645](https://cve.now/CVE-2016-4645.md): CFNetwork in Apple OS X before 10.11.6 uses weak permissions for web-browser cookies, which allows local users to obtain sensitive informati (no CVSS) - [CVE-2016-4646](https://cve.now/CVE-2016-4646.md): Audio in Apple OS X before 10.11.6 mishandles a size value, which allows remote attackers to obtain sensitive information or cause a denial (no CVSS) - [CVE-2016-4647](https://cve.now/CVE-2016-4647.md): Audio in Apple OS X before 10.11.6 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted file (no CVSS) - [CVE-2016-4648](https://cve.now/CVE-2016-4648.md): Audio in Apple OS X before 10.11.6 allows local users to obtain sensitive kernel memory-layout information or cause a denial of service (out (no CVSS) - [CVE-2016-4649](https://cve.now/CVE-2016-4649.md): Audio in Apple OS X before 10.11.6 allows local users to cause a denial of service (NULL pointer dereference) via unspecified vectors. (no CVSS) - [CVE-2016-4651](https://cve.now/CVE-2016-4651.md): Cross-site scripting (XSS) vulnerability in the WebKit JavaScript bindings in Apple iOS before 9.3.3 and Safari before 9.1.2 allows remote a (no CVSS) - [CVE-2016-4652](https://cve.now/CVE-2016-4652.md): CoreGraphics in Apple OS X before 10.11.6 allows local users to obtain sensitive information from kernel memory and consequently gain privil (no CVSS) - [CVE-2016-4653](https://cve.now/CVE-2016-4653.md): The kernel in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows local users to gain privileges (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2016-07-22 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.