CVE-2016-4754

ServerDocs Server in Apple OS X Server before 5.2 supports the RC4 cipher, which might allow remote attackers to defeat cryptographic protection mechanisms via unspecified vectors...

CVE-2016-4717

The File Bookmark component in Apple OS X before 10.12 mishandles scoped-bookmark file descriptors, which allows attackers to cause a denial of service via a crafted app...

CVE-2016-4716

diskutil in DiskArbitration in Apple OS X before 10.12 allows local users to gain privileges via unspecified vectors...

CVE-2016-4716

DiskArbitration (diskutil) in Apple OS X prior to 10.12 is affected by CVE-2016-4716, allowing a local user to gain privileges via unspecified vectors. The issue is addressed in macOS Sierra 10.12; system owners should upgrade to macOS 10.12 or newer to remediate. The description does not specify...

CVE-2016-4706

CVE-2016-4706 – Apple OS X cd9660 is a local-denial-of-service vulnerability in the cd9660 filesystem component. The issue is an input-validation failure in cd9660 that can be exploited by a local user to crash or otherwise deny service to the system. The vulnerability is documented in the NVD en...

CVE-2016-4754

CVE-2016-4754 affects ServerDocs Server in Apple OS X Server before 5.2. The issue is weaknesses in the RC4 cryptographic algorithm that allow an unauthenticated, remote attacker to defeat cryptographic protection. Apple’s macOS Server 5.2 mitigation removes RC4 support for ServerDocs Server, add...

CVE-2016-4745

The Kerberos 5 aka krb5 PAM module in Apple OS X before 10.12 does not use constant-time operations for determining username validity, which makes it easier for remote attackers to enumerate user accounts via a timing side-channel attack...

CVE-2016-4697

Apple HSSPI Support in Apple OS X before 10.12 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

CVE-2016-4694

The Apache HTTP Server in Apple OS X before 10.12 and OS X Server before 5.2 follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted CGI client data in the HTTPPROXY environment variable, which might allow remote attackers to redirect an...

CVE-2016-4706

cd9660 in Apple OS X before 10.12 allows local users to cause a denial of service via unspecified vectors...

CVE-2016-4697

The connected ZDI advisory CVE-2016-4697 details a local privilege-escalation in Apple OS X via the AppleHSSPIHIDDriver (kernel extension). The root cause is a buffer-overflow-like flaw caused by insufficient validation of the length of user-supplied data before copying it to a buffer, permitting...

CVE-2016-4699

Technical details (affected components, root cause, patch) for CVE-2016-4699 are not provided in the connected documents; please monitor for updates from Apple security advisories and third-party sources for concrete specifics.

CVE-2016-4723

CVE-2016-4723 affects Intel Graphics Driver on macOS OS X versions prior to 10.12. The entry notes a memory management flaw described as a use-after-free issue, allowing either arbitrary code execution in kernel context or a denial of service when a crafted app triggers the vulnerability. The con...

CVE-2016-4736

libarchive in Apple OS X before 10.12 allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via a crafted file...

CVE-2016-4710

WindowServer in Apple OS X before 10.12 allows local users to obtain root access via vectors that leverage "type confusion," a different vulnerability than CVE-2016-4709...

CVE-2016-4739

mDNSResponder in Apple OS X before 10.12, when VMnet.framework is used, arranges for a DNS proxy to listen on all interfaces, which allows remote attackers to obtain sensitive information by sending a DNS query to an unintended interface...

Apple OS X AppleHSSPIHIDDriver Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Apple OS X. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

Apple OS X IOThunderboltFamily Uninitialized Memory Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Apple OS X. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the IOThunderboltFamily...

Apple OS X AudioAUUC Integer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Apple OS X. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the...

Apple OS X AppleUpstreamUserClient Out-Of-Bounds Access Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Apple OS X. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the...