2101 matches found
CVE-2016-1812
CVE-2016-1812 describes a vulnerability in the Intel Graphics Driver on OS X El Capitan (OS X) prior to 10.11.5. A buffer overflow in the driver could allow a crafted application to execute arbitrary code with kernel privileges (privileged context) on the affected system. Documented impact aligns...
CVE-2016-1798
Issue: CVE-2016-1798 affects macOS OS X El Capitan (v10.11) and later in the Audio subsystem. Root cause: memory-related vulnerability leading to a NULL pointer dereference via a crafted app. Impact: potential denial of service. Affected platform: OS X El Capitan v10.11 and later; observed remedi...
CVE-2016-1843
The Messages component in Apple OS X before 10.11.5 mishandles filename encoding, which allows remote attackers to obtain sensitive information via unspecified vectors...
CVE-2016-1853
Tcl in Apple OS X before 10.11.5 allows remote attackers to obtain sensitive information by leveraging SSLv2 support...
CVE-2016-1841
libxslt, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site...
CVE-2016-1810
CVE-2016-1810 affects OS X El Capitan 10.11.x, specifically the Graphics Drivers component. The Apple security content for 10.11.5/Security Update 2016-003 describes kernel‑level code execution and memory corruption risks addressed by the update. The underlying issue is a memory corruption vulner...
CVE-2016-1806
CVE-2016-1806 affects Apple OS X prior to 10.11.5, via the Crash Reporter. A crafted app may cause arbitrary code execution with kernel/privileged context. Impact is high (local access required). Apple’s security update 10.11.5 / Security Update 2016-003 addresses the issue by fixing memory handl...
CVE-2016-1825
IOHIDFamily in Apple OS X El Capitan before 10.11.5 allows a crafted app to execute arbitrary code in kernel context or cause a memory corruption-based DoS. Root cause: memory corruption in IOHIDFamily. Apple patched in OS X 10.11.5 (HT206567); later docs reference 10.12.2 as a fix in other updat...
CVE-2016-1853
CVE-2016-1853 refers to Tcl on macOS OS X El Capitan prior to 10.11.5. The vulnerability is an information disclosure: an attacker in a privileged network position could leverage SSLv2 support to obtain sensitive information. The connected Apple advisory notes that the protection involves disabli...
CVE-2016-1812
Buffer overflow in Intel Graphics Driver in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context via a crafted app...
CVE-2016-1846
The nvCommandQueue::GetHandleIndex method in the NVIDIA Graphics Drivers subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service NULL pointer dereference and memory corruption via a crafted app...
CVE-2016-1825
IOHIDFamily in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...
CVE-2016-1810
The Graphics Drivers subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...
CVE-2016-1851
CVE-2016-1851 affects macOS OS X El Capitan v10.11.0–10.11.4 and later; the Screen Lock feature mishandles password profiles, enabling a physically proximate local attacker to reset expired passwords from the lock screen via unspecified vectors. Impacted component: Screen Lock handling of passwor...
CVE-2016-1820
CVE-2016-1820 affects Apple OS X (El Capitan) via a buffer overflow in IOAudioFamily before 10.11.5, allowing a crafted app to execute arbitrary code with kernel/privileged context. The issue is documented as a local vulnerability with high impact (code execution in a privileged context). The can...
CVE-2016-1797
CVE-2016-1797 corresponds to Apple OS X El Capitan ATS sandbox-escape via FontValidator. A crafted app could bypass the FontValidator sandbox policy, allowing arbitrary code execution with system/kernel privileges. ZDI-16-360 describes the flaw as within the fontd sandbox policy, enabling an atta...
CVE-2016-1850
SceneKit in Apple OS X before 10.11.5 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted file...
CVE-2016-1826
Integer overflow in the dtrace implementation in the kernel in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context via a crafted app...
CVE-2016-1800
CVE-2016-1800 affects the Captive Network Assistant in macOS OS X prior to 10.11.5. The issue arises from how a custom URL scheme is handled, allowing user‑assisted remote attackers to execute arbitrary code via unspecified vectors. The connected documents corroborate the vulnerability’s existenc...