CVE-2016-4709

CVE-2016-4709 is a local privilege-escalation vulnerability in WindowServer on Apple OS X/macOS prior to 10.12. The root cause is a type-confusion issue in CoreGraphics handling that allows a local attacker to obtain root privileges. Connected advisories (ZDI-16-608/16-609) describe the same Wind...