Lucene search
+L

92 matches found

Tenable Nessus
Tenable Nessus
added 2017/05/18 12:0 a.m.270 views

macOS 10.12.x < 10.12.5 Multiple Vulnerabilities

The remote host is running a version of macOS that is 10.12.x prior to 10.12.5. It is, therefore, affected by multiple vulnerabilities : - Multiple memory corruption issues exist in the Kernel component that allow a local attacker to gain kernel-level privileges. CVE-2017-2494, CVE-2017-2546 - A...

9.8CVSS8.9AI score0.06809EPSS
Exploits21References44
Tenable Nessus
Tenable Nessus
added 2017/05/17 12:0 a.m.24 views

Mac OS X 10.x < 10.12.5 Multiple Vulnerabilities

Binary data 700119.prm...

9.8CVSS8.5AI score0.11484EPSS
Exploits25References42
ThreatPost
ThreatPost
added 2017/05/16 1:56 p.m.44 views

Apple Patches Pwn2Own Vulnerabilities in Safari, macOS, iOS

Apple fixed 66 vulnerabilities across seven product lines, including Safari, iTunes, macOS, and iOS, on Monday. Many of the fixes – especially in macOS and Safari – resolve vulnerabilities uncovered at Pwn2Own, the hacking contest held at CanSecWest each year. Contestants collectively earned...

4.3CVSS9.1AI score0.01009EPSS
Exploits0References7
Zero Day Initiative
Zero Day Initiative
added 2017/05/15 12:0 a.m.54 views

(Pwn2Own) Apple macOS WindowServer _XGetWindowMovementGroup Stack-based Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Apple macOS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the WindowServer...

4.4CVSS5.3AI score0.01354EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2017/05/15 12:0 a.m.41 views

(Pwn2Own) Apple macOS WindowServer _XGetConnectionPSN Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on vulnerable installations of Apple macOS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

1.9CVSS4.1AI score0.00969EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2016/12/15 12:0 a.m.27 views

Apple OS X WindowServer _XSetApplicationBindingsForWorkspaces Type Confusion Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Apple OS X. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within CoreGraphics. By...

4.4CVSS4.1AI score0.01031EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2016/12/15 12:0 a.m.35 views

Apple OS X WindowServer _XRegisterCursorWithData Memory Corruption Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Apple OS X. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the CoreGraphics...

4.4CVSS5.8AI score0.01326EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2016/12/15 12:0 a.m.38 views

Apple OS X WindowServer _XSetDictionaryForCurrentSession Type Confusion Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Apple OS X. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the CoreGraphics...

4.4CVSS5.4AI score0.01031EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2016/11/17 12:0 a.m.44 views

Apple Mac OS X Multiple Vulnerabilities-03 (Nov 2016)

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7.1AI score0.34968EPSS
Exploits4References7
OpenVAS
OpenVAS
added 2016/11/17 12:0 a.m.60 views

Apple Mac OS X Multiple Vulnerabilities-02 (Nov 2016)

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7.1AI score0.34968EPSS
Exploits4References10
Zero Day Initiative
Zero Day Initiative
added 2016/11/15 12:0 a.m.36 views

Apple OS X WindowServer _XSetPreferencesForWorkspaces Type Confusion Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Apple OS X. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the CoreGraphics...

4.4CVSS5.4AI score0.00465EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2016/11/15 12:0 a.m.45 views

Apple OS X WindowServer _XSetPerUserConfigurationData Type Confusion Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Apple OS X. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the CoreGraphics...

4.4CVSS5.4AI score0.00472EPSS
Exploits0References1
CNVD
CNVD
added 2016/09/28 12:0 a.m.13 views

Apple OS X WindowServer Type Obfuscation Vulnerability

Apple OS X is a specialized operating system developed by Apple for Mac computers, of which WindowServer is a Window Service component. A type obfuscation vulnerability exists in WindowServer in Apple OS X versions prior to 10.12, which can be exploited by a local attacker to gain root privileges...

7.8CVSS6.7AI score0.00465EPSS
Exploits0References1
CNVD
CNVD
added 2016/09/28 12:0 a.m.13 views

Apple OS X WindowServer Type Obfuscation Vulnerability (CNVD-2016-08248)

Apple OS X is a specialized operating system developed by Apple for Mac computers, of which WindowServer is a Window Service component. A type obfuscation vulnerability exists in WindowServer in Apple OS X versions prior to 10.12, which can be exploited by a local attacker to gain root privileges...

7.8CVSS6.7AI score0.00472EPSS
Exploits0References1
OSV
OSV
added 2016/09/25 10:59 a.m.3 views

CVE-2016-4710

WindowServer in Apple OS X before 10.12 allows local users to obtain root access via vectors that leverage "type confusion," a different vulnerability than CVE-2016-4709...

7.8CVSS7.3AI score0.00465EPSS
Exploits0References5
NVD
NVD
added 2016/09/25 10:59 a.m.14 views

CVE-2016-4710

WindowServer in Apple OS X before 10.12 allows local users to obtain root access via vectors that leverage "type confusion," a different vulnerability than CVE-2016-4709...

7.8CVSS6.8AI score0.00465EPSS
Exploits0References5
NVD
NVD
added 2016/09/25 10:59 a.m.17 views

CVE-2016-4709

WindowServer in Apple OS X before 10.12 allows local users to obtain root access via vectors that leverage "type confusion," a different vulnerability than CVE-2016-4710...

7.8CVSS6.8AI score0.00472EPSS
Exploits0References5
OSV
OSV
added 2016/09/25 10:59 a.m.5 views

CVE-2016-4709

WindowServer in Apple OS X before 10.12 allows local users to obtain root access via vectors that leverage "type confusion," a different vulnerability than CVE-2016-4710...

7.8CVSS7.3AI score0.00472EPSS
Exploits0References5
Prion
Prion
added 2016/09/25 10:59 a.m.24 views

Type confusion

WindowServer in Apple OS X before 10.12 allows local users to obtain root access via vectors that leverage "type confusion," a different vulnerability than CVE-2016-4710...

7.2CVSS6.5AI score0.00472EPSS
Exploits0References5Affected Software1
Prion
Prion
added 2016/09/25 10:59 a.m.20 views

Type confusion

WindowServer in Apple OS X before 10.12 allows local users to obtain root access via vectors that leverage "type confusion," a different vulnerability than CVE-2016-4709...

7.2CVSS6.5AI score0.00472EPSS
Exploits0References5Affected Software1
Rows per page
Query Builder