About the security content of OS X El Capitan v10.11.4 and Security Update 2016-002

🗓️ 21 Mar 2016 00:00:00Reported by AppleType

Security content of OS X El Capitan v10.11.4 and Security Update 2016-002. For protection, Apple waits to disclose security issues until a full investigation and necessary patches are available. The update addresses multiple vulnerabilities in various components, such as Apache, AppleRAID, USBNetworking, Bluetooth, Carbon, dyld, FontParser, and HTTPProtocol

Reporter	Title	Published	Views	Family All 2115
0day.today	libpng 1.6.15 Heap Overflow Exploit	24 Jan 201500:00	–	zdt
0day.today	Apple Mac OSX / iOS - SUID Binary Logic Error Kernel Code Execution	23 Mar 201600:00	–	zdt
0day.today	Apple Intel HD 3000 Graphics driver 10.0.0 - Privilege Escalation	8 Apr 201600:00	–	zdt
0day.today	Mach Race OSX - Privilege Escalation	27 Apr 201600:00	–	zdt
0day.today	Apple Mac OSX - Kernel Use-After-Free and Double Delete Due to Incorrect Locking in Intel GPU Driver	23 Mar 201600:00	–	zdt
0day.today	Apple Mac OSX - Kernel Unchecked Array Index Used to Read Object Pointer Then Call Virtual Method in	23 Mar 201600:00	–	zdt
0day.today	Apple Mac OSX - Kernel AppleKeyStore Use-After-Free	23 Mar 201600:00	–	zdt
0day.today	Apple Mac OSX - Kernel Code Execution Due to Lack of Bounds Checking in AppleUSBPipe::Abort	23 Mar 201600:00	–	zdt
0day.today	Apple QuickTime < 7.7.79.80.95 - PSD File Parsing Memory Corruption	30 Mar 201600:00	–	zdt
0day.today	Apple QuickTime < 7.7.79.80.95 - FPX File Parsing Memory Corruption 2	30 Mar 201600:00	–	zdt

Source	Link
support	www.support.apple.com/en-us/HT201222

21 Mar 2016 00:00Current

0.7Low risk

Vulners AI Score0.7

CVSS 210

CVSS 3.18.8 - 9.8

CVSS 310

EPSS0.63468

SSVC

apple security update os x el capitan cve-ids apache_mod_php appleraid appleusbnetworking bluetooth carbon dyld fontparser httpprotocol