Palo Alto Networks Researchers Uncover Critical Apple Product Vulnerabilities
Summary: Palo Alto Networks researchers Tongbo Luo and Bo Qu were credited with discovering two Apple vulnerabilities: a WebKit flaw (CVE-2016-1855) affecting Safari on OS X Mavericks v10.9.5, OS X Yosemite v10.10.5 and OS X El Capitan v10.10.5, and an OpenGL flaw (CVE-2016-1847) affecting Apple TV (fourth generation and later), iPhone 4S and later, iPod Touch (fifth generation and later), and iPad 2 and later. Apple addressed both findings in a recent security update, and Palo Alto Networks released IPS signatures covering them in content release 585.
What you should know: The OpenGL flaw reached the iPhone 4S and later, the iPad 2 and later, and Apple TV fourth generation and later, so the affected install base spans years of devices that only get fixed if the update is actually applied.
Read the original at Unit 42 Palo Alto Networks ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2016-1847CVE-2016-1855
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026