Design/Logic Flaw

An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the "IOFireWireFamily" component, which allows local users to obtain sensitive information from kernel memory via unspecified vectors...

Design/Logic Flaw

An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the "IOSurface" component. It allows local users to obtain sensitive kernel memory-layout information via unspecified vectors...

CVE-2016-7608

CVE-2016-7608 affects IOFireWireFamily in macOS Sierra (10.12.x) and earlier, enabling a local attacker to read kernel memory via an unspecified vector; described as a memory‑corruption/read kernel memory issue. Apple’s security content links this to the macOS 10.12.2 release (security update) wh...

CVE-2016-7625

CVE-2016-7625 concerns macOS Sierra IOKit: a local attacker can read kernel memory layout through IOKit, with the issue present in macOS versions prior to 10.12.2. Apple’s security update 10.12.2 (and accompanying updates) addressed this class of memory-disclosure issues; the Apple security conte...

CVE-2016-7608

An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the "IOFireWireFamily" component, which allows local users to obtain sensitive information from kernel memory via unspecified vectors...

CVE-2016-7657

CVE-2016-7657 is an Apple IOKit memory-corruption vulnerability that could allow a crafted app to read kernel memory on affected systems. Public details in the initial entry reference iOS < 10.2, macOS < 10.12.2, and watchOS

CVE-2016-7657

An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "IOKit" component. It allows attackers to obtain sensitive information from kernel memory via a crafted app...

CVE-2016-7620

An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the "IOSurface" component. It allows local users to obtain sensitive kernel memory-layout information via unspecified vectors...

Apple macOS Sierra IOAudioFamily Memory Leak Vulnerability

Apple macOS Sierra is a specialized operating system developed by Apple for Mac computers.IOAudioFamily is one of the input and output audio components. A memory leak vulnerability exists in IOAudioFamily in Apple macOS Sierra. An attacker can exploit this vulnerability to obtain kernel memory...

Code injection

The Linux compatibility layer in the kernel in FreeBSD 9.3, 10.1, and 10.2 allows local users to read portions of kernel memory and potentially gain privilege via unspecified vectors, related to "handling of Linux futex robust lists."...

CVE-2016-1880

The Linux compatibility layer in the kernel in FreeBSD 9.3, 10.1, and 10.2 allows local users to read portions of kernel memory and potentially gain privilege via unspecified vectors, related to "handling of Linux futex robust lists."...

CVE-2016-1880

CVE-2016-1880 concerns FreeBSD’s Linux binary compatibility layer. The issue arises from a programming error in handling Linux futex robust lists, potentially allowing a local user to read portions of kernel memory and escalate privileges on affected systems. Affected: FreeBSD versions with Linux...

Security update for the Linux Kernel (important)

The openSUSE Leap 42.1 kernel to 4.1.38 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2016-7117: Use-after-free vulnerability in the sysrecvmmsg function in net/socket.c in the Linux kernel allowed remote attackers to execute arbitrary code via vectors...

SUSE-SU-2017:0407-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 rt-kernel was updated to 3.12.69 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2015-8962: Fixed a double free vulnerability in the SCSI subsystem that allowed local users to gain privileges or cause a denial of service memory...

VMware Fusion 'kASLR' Information Disclosure Vulnerability - Mac OS X

VMware Fusion is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:vmware:fusion"...

About the security content of tvOS 10 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

About the security content of iOS 10.0.1 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

About the security content of watchOS 2.2.1 - Apple Support

For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are available. To learn more about Apple Product Security, see the Apple Product Security website. For information about...

SUSE SLES12 Security Update : kernel (SUSE-SU-2017:0244-1)

This update for the Linux Kernel 3.12.55-5242 fixes several issues. The following security bugs were fixed : - CVE-2016-9806: Race condition in the netlinkdump function in net/netlink/afnetlink.c in the Linux kernel allowed local users to cause a denial of service double free or possibly have...

SUSE-SU-2017:0245-1 Security update for Linux Kernel Live Patch 16 for SLE 12

This update for the Linux Kernel 3.12.60-5257 fixes several issues. The following security bugs were fixed: - CVE-2016-9806: Race condition in the netlinkdump function in net/netlink/afnetlink.c in the Linux kernel allowed local users to cause a denial of service double free or possibly have...