CVE-2016-4645

CFNetwork in Apple OS X before 10.11.6 uses weak permissions for web-browser cookies, which allows local users to obtain sensitive information via unspecified vectors...

CVE-2016-4601

CVE-2016-4601 affects QuickTime on OS X El Capitan v10.11 (and later). A memory corruption issue in QuickTime can be triggered by a crafted SGI image, allowing remote code execution or a denial of service. Apple’s security content for OS X El Capitan v10.11.6 (Security Update 2016-004) addresses ...

CVE-2014-9862

CVE-2014-9862 targets the bspatch component of bsdiff. The issue is an integer signedness error in bspatch that can cause a heap-based buffer overflow when processing a crafted patch, enabling a remote attacker to execute arbitrary code or cause a denial of service. Affected products include Appl...

CVE-2016-4640

CVE-2016-4640 corresponds to a Login Window vulnerability in OS X El Capitan v10.11.x (pre-10.11.6) where a crafted application can cause memory corruption, leading to arbitrary code execution in a privileged context, or disclosure of user information, or a denial of service. Apple’s security con...

CVE-2016-4595

Safari Login AutoFill in Apple OS X before 10.11.6 allows physically proximate attackers to discover passwords by reading the screen during the login procedure...

CVE-2016-4641

Login Window in Apple OS X before 10.11.6 allows attackers to execute arbitrary code in a privileged context or obtain sensitive user information via a crafted app that leverages a "type confusion."...

CVE-2016-4629

CVE-2016-4629 affects Apple’s OS X ImageIO (OS X before 10.11.6). A crafted EXR image can trigger memory corruption via signed xStride/yStride values, enabling remote code execution or a denial of service. Apple lists OS X 10.11.6 (El Capitan) and Security Update 2016-004 as the fix; patching is ...

CVE-2016-4599

CVE-2016-4599 affects QuickTime in Apple OS X 10.11.x (El Capitan) and later. A memory corruption vulnerability can be triggered by processing a specially crafted Photoshop document, potentially allowing a remote attacker to execute arbitrary code or cause a denial of service. The issue is tied t...

CVE-2016-4649

Audio in Apple OS X before 10.11.6 allows local users to cause a denial of service NULL pointer dereference via unspecified vectors...

CVE-2016-4599

QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted Photoshop document...

CVE-2016-4598

QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted image...

CVE-2016-4596

QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted FlashPix bitmap image, a different vulnerability than CVE-2016-4597, CVE-2016-4600, and CVE-2016-4602...

CVE-2016-4652

CVE-2016-4652 affects Apple OS X before 10.11.6, in CoreGraphics. A local user can trigger an out-of-bounds read in CoreGraphics to access kernel memory, enabling privilege escalation or causing a denial of service. Apple’s fix is included in OS X 10.11.6 / Security Update 2016-004; mitigation is...

CVE-2016-4598

CVE-2016-4598 affects QuickTime in OS X El Capitan (and earlier) where memory corruption in QuickTime can be triggered by a crafted image to allow remote code execution or cause a denial of service. The issue is documented as part of Apple’s OS X El Capitan v10.11.6 security content, which lists ...

CVE-2016-4602

CVE-2016-4602 affects QuickTime in macOS OS X prior to 10.11.6 . A crafted FlashPix bitmap image can trigger a memory corruption vulnerability, allowing a remote attacker to execute arbitrary code or cause a denial of service. Public sources (CNVD-2016-05737) describe the vulnerability as a Quick...

CVE-2016-4621

CVE-2016-4621 affects Apple OS X’s libc++abi component prior to 10.11.6. According to the NVD description, a crafted application can cause memory corruption or execute arbitrary code in a privileged context, potentially leading to a denial of service. The exploit is described as local (requires a...

CVE-2016-4648

Audio in Apple OS X before 10.11.6 allows local users to obtain sensitive kernel memory-layout information or cause a denial of service out-of-bounds read via unspecified vectors...

CVE-2014-9862

Integer signedness error in bspatch.c in bspatch in bsdiff, as used in Apple OS X before 10.11.6 and other products, allows remote attackers to execute arbitrary code or cause a denial of service heap-based buffer overflow via a crafted patch file...

CVE-2016-4633

Intel Graphics Driver in Apple OS X before 10.11.6 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

CVE-2016-4640

Login Window in Apple OS X before 10.11.6 allows attackers to execute arbitrary code in a privileged context, obtain sensitive user information, or cause a denial of service memory corruption via a crafted app...