CVE-2016-4639

Login Window in Apple OS X before 10.11.6 does not properly initialize memory, which allows local users to cause a denial of service via unspecified vectors...

CVE-2016-4638

Login Window in Apple OS X before 10.11.6 allows attackers to gain privileges via a crafted app that leverages a "type confusion."...

CVE-2016-4638

Login Window in Apple OS X before 10.11.6 allows attackers to gain privileges via a crafted app that leverages a "type confusion."...

Type confusion

Login Window in Apple OS X before 10.11.6 allows attackers to gain privileges via a crafted app that leverages a "type confusion."...

Design/Logic Flaw

Login Window in Apple OS X before 10.11.6 does not properly initialize memory, which allows local users to cause a denial of service via unspecified vectors...

CVE-2016-4639

Login Window in Apple OS X before 10.11.6 does not properly initialize memory, which allows local users to cause a denial of service via unspecified vectors...

CVE-2016-4641

Login Window in Apple OS X before 10.11.6 allows attackers to execute arbitrary code in a privileged context or obtain sensitive user information via a crafted app that leverages a "type confusion."...

CVE-2016-4638

Login Window in Apple OS X before 10.11.6 allows attackers to gain privileges via a crafted app that leverages a "type confusion."...

CVE-2016-4639

CVE-2016-4639: In OS X El Capitan (Login Window), memory initialization flaw allows a local attacker to cause a denial of service. Affected: OS X El Capitan v10.11 and later; remediation: apply OS X 10.11.6 Security Update 2016-004 (patches described by Apple). The Apple advisory clarifies the vu...

CVE-2016-4640

Login Window in Apple OS X before 10.11.6 allows attackers to execute arbitrary code in a privileged context, obtain sensitive user information, or cause a denial of service memory corruption via a crafted app...

CVE-2016-4640

CVE-2016-4640 corresponds to a Login Window vulnerability in OS X El Capitan v10.11.x (pre-10.11.6) where a crafted application can cause memory corruption, leading to arbitrary code execution in a privileged context, or disclosure of user information, or a denial of service. Apple’s security con...

CVE-2016-4641

CVE-2016-4641 affects the Login Window in Apple OS X prior to 10.11.6, enabling a crafted app leveraging a type confusion flaw to run arbitrary code in a privileged context or access sensitive user data. Apple’s security content associates this with the Login Window issue and notes remediation in...

CVE-2016-4638: Undefined Security Weakness

Login Window in Apple OS X before 10.11.6 allows attackers to gain privileges via a crafted app that leverages a "type confusion."...

CVE-2016-4640: Improper Restriction of Operations within the Bounds of a Memory Buffer

Login Window in Apple OS X before 10.11.6 allows attackers to execute arbitrary code in a privileged context, obtain sensitive user information, or cause a denial of service memory corruption via a crafted app...

CVE-2016-4639: Undefined Security Weakness

Login Window in Apple OS X before 10.11.6 does not properly initialize memory, which allows local users to cause a denial of service via unspecified vectors...

CVE-2016-4641: Improper Input Validation

Login Window in Apple OS X before 10.11.6 allows attackers to execute arbitrary code in a privileged context or obtain sensitive user information via a crafted app that leverages a "type confusion."...

PT-2016-2715

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.11.6 Description The issue is related to a denial of service caused by a NULL pointer dereference in the Audio component of Apple OS X. Additionally, there are reports of vulnerabilities in the login window and...

The performance benefits of rel=noopener

If you have links to another origin, you should use rel="noopener", especially if they open in a new tab/window. Example site Without this, the new page can access your window object via window.opener. Thankfully the origin security model of the web prevents it reading your page, but no-thankfull...

PT-2016-6078

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.11.6 Description The issue allows attackers to execute arbitrary code in a privileged context or obtain sensitive user information via a crafted app that leverages a type confusion in the Login Window...

PT-2016-6076

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.11.6 Description The issue is related to the Login Window in Apple OS X, where it does not properly initialize memory. This allows local users to cause a denial of service via unspecified vectors. The problem is...