Lucene search
K

40 matches found

BDU FSTEC
BDU FSTEC
added 2017/06/15 12:0 a.m.10 views

The vulnerability of the DiskArbitration component in the Mac OS X operating system allows a hacker to execute arbitrary code in a privileged context.

The vulnerability of the DiskArbitration component in the Mac OS X operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code in privileged context racing condition through a...

7.6CVSS7.6AI score0.0439EPSS
Exploits2References2Affected Software1
Apple
Apple
added 2017/06/08 9:43 a.m.95 views

About the security content of macOS Sierra 10.12.5, Security Update 2017-002 El Capitan, and Security Update 2017-002 Yosemite - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

9.8CVSS0.7AI score0.11484EPSS
Exploits26Affected Software4
CNVD
CNVD
added 2017/05/23 12:0 a.m.4 views

Apple macOS Sierra DiskArbitration Competitive Conditional Elevation of Privilege Vulnerability

Apple macOS is an operating system that runs on Apple's Macintosh line of computers. A competitive conditional elevation of privilege vulnerability exists in Apple macOS DiskArbitration, which can be exploited by remote attackers to build malicious applications with elevated privileges...

7.6CVSS7AI score0.0439EPSS
Exploits2References1
NVD
NVD
added 2017/05/22 5:29 a.m.18 views

CVE-2017-2533

An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "DiskArbitration" component. A race condition allows attackers to execute arbitrary code in a privileged context via a crafted app...

7.6CVSS6.3AI score0.0439EPSS
Exploits2References5
Prion
Prion
added 2017/05/22 5:29 a.m.17 views

Race condition

An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "DiskArbitration" component. A race condition allows attackers to execute arbitrary code in a privileged context via a crafted app...

7.6CVSS6.1AI score0.0439EPSS
Exploits2References5Affected Software1
Cvelist
Cvelist
added 2017/05/22 4:54 a.m.28 views

CVE-2017-2533

An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "DiskArbitration" component. A race condition allows attackers to execute arbitrary code in a privileged context via a crafted app...

6.9AI score0.0439EPSS
Exploits2References5
CVE
CVE
added 2017/05/22 4:54 a.m.63 views

CVE-2017-2533

CVE-2017-2533 is a real, concrete vulnerability affecting macOS DiskArbitration. The issue is a race condition in DiskArbitration that can allow a crafted app running with local access to execute arbitrary code in a privileged context, effectively a local privilege escalation. Affected systems in...

7.6CVSS6.7AI score0.0439EPSS
Exploits2References5Affected Software1
Tenable Nessus
Tenable Nessus
added 2017/05/18 12:0 a.m.91 views

Mac OS X Multiple Vulnerabilities (Security Update 2017-002)

The remote host is running a version of Mac OS X 10.10.5 or 10.11.6 that is missing a security update. It is therefore, affected by multiple vulnerabilities : - A memory corruption issue exists in the Sandbox component that allows an unauthenticated, remote attacker to escape an application...

9.8CVSS7.7AI score0.06809EPSS
Exploits10References15
Tenable Nessus
Tenable Nessus
added 2017/05/18 12:0 a.m.266 views

macOS 10.12.x < 10.12.5 Multiple Vulnerabilities

The remote host is running a version of macOS that is 10.12.x prior to 10.12.5. It is, therefore, affected by multiple vulnerabilities : - Multiple memory corruption issues exist in the Kernel component that allow a local attacker to gain kernel-level privileges. CVE-2017-2494, CVE-2017-2546 - A...

9.8CVSS8.9AI score0.06809EPSS
Exploits21References44
Tenable Nessus
Tenable Nessus
added 2017/05/17 12:0 a.m.20 views

Mac OS X 10.x < 10.12.5 Multiple Vulnerabilities

Binary data 700119.prm...

9.8CVSS8.5AI score0.11484EPSS
Exploits25References42
Apple
Apple
added 2017/05/15 12:0 a.m.65 views

About the security content of macOS Sierra 10.12.5, Security Update 2017-002 El Capitan, and Security Update 2017-002 Yosemite

About the security content of macOS Sierra 10.12.5, Security Update 2017-002 El Capitan, and Security Update 2017-002 Yosemite This document describes the security content of macOS Sierra 10.12.5, Security Update 2017-002 El Capitan, and Security Update 2017-002 Yosemite. About Apple security...

9.8CVSS0.7AI score0.11484EPSS
Exploits26References1Affected Software3
CNVD
CNVD
added 2016/09/28 12:0 a.m.5 views

Apple OS X DiskArbitration Arbitrary Code Execution Vulnerability

Apple OS X is a suite of operating systems developed by Apple for Mac computers.Address Book is an address book or contact framework.DiskArbitration is a component that handles disk mounting.... An arbitrary code execution vulnerability exists in diskutil in DiskArbitration in Apple OS X versions...

7.8CVSS7.7AI score0.00342EPSS
Exploits0References1
NVD
NVD
added 2016/09/25 10:59 a.m.14 views

CVE-2016-4716

diskutil in DiskArbitration in Apple OS X before 10.12 allows local users to gain privileges via unspecified vectors...

7.8CVSS6.9AI score0.00342EPSS
Exploits0References4
Prion
Prion
added 2016/09/25 10:59 a.m.17 views

Design/Logic Flaw

diskutil in DiskArbitration in Apple OS X before 10.12 allows local users to gain privileges via unspecified vectors...

7.2CVSS6.4AI score0.00342EPSS
Exploits0References4Affected Software1
CVE
CVE
added 2016/09/25 10:0 a.m.49 views

CVE-2016-4716

DiskArbitration (diskutil) in Apple OS X prior to 10.12 is affected by CVE-2016-4716, allowing a local user to gain privileges via unspecified vectors. The issue is addressed in macOS Sierra 10.12; system owners should upgrade to macOS 10.12 or newer to remediate. The description does not specify...

7.8CVSS7.7AI score0.00342EPSS
Exploits0References4Affected Software1
Tenable Nessus
Tenable Nessus
added 2016/09/23 12:0 a.m.79 views

macOS < 10.12 Multiple Vulnerabilities

The remote host is running a version of Mac OS X that is prior to 10.10.5, 10.11.x prior to 10.11.6, or is not macOS 10.12. It is, therefore, affected by multiple vulnerabilities in the following components : - apache - apachemodphp - Apple HSSPI Support - AppleEFIRuntime - AppleMobileFileIntegri...

10CVSS7.9AI score0.15484EPSS
Exploits23References71
Cvelist
Cvelist
added 2004/09/01 4:0 a.m.23 views

CVE-2004-0167

DiskArbitration in Mac OS X 10.2.8 and 10.3.2 does not properly initialize writeable removable media...

6.6AI score0.02272EPSS
Exploits0References6
CVE
CVE
added 2004/09/01 4:0 a.m.57 views

CVE-2004-0167

CVE-2004-0167 affects Apple Mac OS X DiskArbitration for 10.2.8 and 10.3.2, where DiskArbitration does not properly initialize writable removable media. The vulnerability is tied to initialization of writable media (e.g., CD-RW/DVD media) and has been addressed by a vendor patch in Apple Security...

7.5CVSS6.6AI score0.02272EPSS
Exploits0References6Affected Software2
NVD
NVD
added 2004/03/15 5:0 a.m.16 views

CVE-2004-0167

DiskArbitration in Mac OS X 10.2.8 and 10.3.2 does not properly initialize writeable removable media...

7.5CVSS6.6AI score0.02272EPSS
Exploits0References6
CERT
CERT
added 2004/02/25 12:0 a.m.35 views

Apple Mac OS X contains a vulnerability in DiskArbitration when initializing writable removable media

Overview Apple Mac OS X contains a vulnerability in the way DiskArbitration initializes writable removable media. Description The DiskArbitration Server in Apple Mac OS X tracks new disks and provides notifications announcing their availability. There is a non-specific vulnerability identified as...

7.5CVSS6AI score0.02272EPSS
Exploits0References2
Rows per page
Query Builder