Mac Os X Security Vulnerabilities and Issues — Page 4 of Mac Os X CVE List

Lucene search

AppleMac Os X

220 matches found

CVE•added 2016/07/22 3:0 a.m.•44 views

CVE-2016-4648

Audio in Apple OS X before 10.11.6 allows local users to obtain sensitive kernel memory-layout information or cause a denial of service (out-of-bounds read) via unspecified vectors.

5.5CVSS6AI score0.0013EPSS

CVE•added 2016/09/25 10:59 a.m.•44 views

CVE-2016-4703

Bluetooth in Apple OS X before 10.12 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

9.3CVSS8.4AI score0.00363EPSS

CVE•added 2016/09/25 10:59 a.m.•44 views

CVE-2016-4723

Intel Graphics Driver in Apple OS X before 10.12 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

9.3CVSS8.4AI score0.0036EPSS

CVE•added 2016/09/25 10:59 a.m.•44 views

CVE-2016-4724

IOAcceleratorFamily in Apple iOS before 10 and OS X before 10.12 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference) via a crafted app.

9.3CVSS8.3AI score0.00172EPSS

CVE•added 2016/01/10 3:59 a.m.•43 views

CVE-2015-7116

libxml2 in Apple iOS before 9.2, OS X before 10.11.2, and tvOS before 9.1 allows remote attackers to obtain sensitive information or cause a denial of service (memory corruption) via a crafted XML document, a different vulnerability than CVE-2015-7115.

4.3CVSS4.8AI score0.00871EPSS

CVE•added 2016/02/01 11:59 a.m.•43 views

CVE-2016-1716

AppleGraphicsPowerManagement in Apple OS X before 10.11.3 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.

7.8CVSS6.7AI score0.00047EPSS

CVE•added 2016/03/24 1:59 a.m.•43 views

CVE-2016-1746

IOGraphics in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1747.

9.3CVSS6.5AI score0.00228EPSS

CVE•added 2016/03/24 1:59 a.m.•43 views

CVE-2016-1750

Use-after-free vulnerability in the kernel in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows attackers to execute arbitrary code in a privileged context via a crafted app.

9.3CVSS6.8AI score0.00378EPSS

CVE•added 2016/05/20 10:59 a.m.•43 views

CVE-2016-1795

AppleGraphicsPowerManagement in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

9.3CVSS8AI score0.00363EPSS

CVE•added 2016/05/20 10:59 a.m.•43 views

CVE-2016-1804

The Multi-Touch subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

9.3CVSS7.6AI score0.00652EPSS

CVE•added 2016/05/20 10:59 a.m.•43 views

CVE-2016-1805

CoreStorage in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context via a crafted app.

9.3CVSS7.8AI score0.00377EPSS

CVE•added 2016/07/22 3:0 a.m.•43 views

CVE-2016-4641

Login Window in Apple OS X before 10.11.6 allows attackers to execute arbitrary code in a privileged context or obtain sensitive user information via a crafted app that leverages a "type confusion."

9.3CVSS7.9AI score0.00325EPSS

CVE•added 2016/03/24 1:59 a.m.•42 views

CVE-2016-1759

The kernel in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

9.3CVSS6.8AI score0.00241EPSS

CVE•added 2016/05/20 10:59 a.m.•42 views

CVE-2016-1792

The AMD subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

9.3CVSS8AI score0.00363EPSS

CVE•added 2016/05/20 10:59 a.m.•42 views

CVE-2016-1800

Captive Network Assistant in Apple OS X before 10.11.5 mishandles a custom URL scheme, which allows user-assisted remote attackers to execute arbitrary code via unspecified vectors.

9.3CVSS8AI score0.01284EPSS

CVE•added 2016/05/20 10:59 a.m.•42 views

CVE-2016-1809

Disk Utility in Apple OS X before 10.11.5 uses incorrect encryption keys for disk images, which has unspecified impact and attack vectors.

7.8CVSS7.5AI score0.0021EPSS

CVE•added 2016/05/20 10:59 a.m.•42 views

CVE-2016-1814

IOAcceleratorFamily in Apple iOS before 9.3.2, OS X before 10.11.5, and tvOS before 9.2.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted app.

5.5CVSS5.3AI score0.00454EPSS

CVE•added 2016/05/20 10:59 a.m.•42 views

CVE-2016-1832

libc in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.

7.8CVSS7AI score0.00099EPSS

CVE•added 2016/05/20 10:59 a.m.•42 views

CVE-2016-1846

The nvCommandQueue::GetHandleIndex method in the NVIDIA Graphics Drivers subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference and memory corruption) via a crafted app.

9.3CVSS7.6AI score0.01909EPSS

CVE•added 2016/06/19 8:59 p.m.•42 views

CVE-2016-1861

The NVIDIA Graphics Drivers subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1846.

9.3CVSS7.6AI score0.01909EPSS

CVE•added 2016/07/22 2:59 a.m.•42 views

CVE-2016-4594

The Sandbox Profiles component in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows attackers to access the process list via a crafted app that makes an API call.

7.8CVSS7.3AI score0.00209EPSS

CVE•added 2016/07/22 2:59 a.m.•42 views

CVE-2016-4598

QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted image.

9.8CVSS9.1AI score0.0169EPSS

CVE•added 2016/07/22 2:59 a.m.•42 views

CVE-2016-4602

QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FlashPix bitmap image, a different vulnerability than CVE-2016-4596, CVE-2016-4597, and CVE-2016-4600.

8.8CVSS8.6AI score0.00836EPSS

CVE•added 2016/07/22 2:59 a.m.•42 views

CVE-2016-4621

libc++abi in Apple OS X before 10.11.6 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

9.3CVSS8.4AI score0.00363EPSS

CVE•added 2016/07/22 2:59 a.m.•42 views

CVE-2016-4630

ImageIO in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted EXR image with B44 compression.

8.8CVSS9AI score0.01109EPSS

CVE•added 2016/07/22 2:59 a.m.•42 views

CVE-2016-4638

Login Window in Apple OS X before 10.11.6 allows attackers to gain privileges via a crafted app that leverages a "type confusion."

9.3CVSS7.4AI score0.00311EPSS

CVE•added 2016/07/22 3:0 a.m.•42 views

CVE-2016-4649

Audio in Apple OS X before 10.11.6 allows local users to cause a denial of service (NULL pointer dereference) via unspecified vectors.

5.5CVSS6.1AI score0.00132EPSS

CVE•added 2016/09/25 10:59 a.m.•42 views

CVE-2016-4711

CCrypt in corecrypto in CommonCrypto in Apple iOS before 10 and OS X before 10.12 allows attackers to discover cleartext information by leveraging a function call that specifies the same buffer for input and output.

7.5CVSS7.5AI score0.00485EPSS

CVE•added 2016/09/25 11:0 a.m.•42 views

CVE-2016-4779

Apple Type Services (ATS) in Apple OS X before 10.12 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file.

7.8CVSS8.6AI score0.00681EPSS

CVE•added 2016/01/11 11:59 a.m.•41 views

CVE-2015-7024

Untrusted search path vulnerability in Apple OS X before 10.11.1 allows local users to bypass intended Gatekeeper restrictions and gain privileges via a Trojan horse program that is loaded from an unexpected directory by an application that has a valid Apple digital signature.

6.9CVSS5.8AI score0.00062EPSS

CVE•added 2016/03/24 1:59 a.m.•41 views

CVE-2016-1745

IOFireWireFamily in Apple OS X before 10.11.4 allows local users to cause a denial of service (NULL pointer dereference) via unspecified vectors.

5.5CVSS4.8AI score0.00048EPSS

CVE•added 2016/05/20 10:59 a.m.•41 views

CVE-2016-1811

ImageIO in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted image.

6.5CVSS6AI score0.01746EPSS

CVE•added 2016/05/20 10:59 a.m.•41 views

CVE-2016-1812

Buffer overflow in Intel Graphics Driver in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context via a crafted app.

9.3CVSS7.9AI score0.00515EPSS

CVE•added 2016/05/20 10:59 a.m.•41 views

CVE-2016-1822

IOFireWireFamily in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

9.3CVSS8AI score0.00423EPSS

CVE•added 2016/06/19 8:59 p.m.•41 views

CVE-2016-1862

Intel Graphics Driver in Apple OS X before 10.11.5 allows attackers to obtain sensitive kernel memory-layout information via a crafted app, a different vulnerability than CVE-2016-1860.

4.3CVSS3.6AI score0.00166EPSS

CVE•added 2016/07/22 3:0 a.m.•41 views

CVE-2016-4645

CFNetwork in Apple OS X before 10.11.6 uses weak permissions for web-browser cookies, which allows local users to obtain sensitive information via unspecified vectors.

3.3CVSS4.9AI score0.00102EPSS

CVE•added 2016/07/22 3:0 a.m.•41 views

CVE-2016-4652

CoreGraphics in Apple OS X before 10.11.6 allows local users to obtain sensitive information from kernel memory and consequently gain privileges, or cause a denial of service (out-of-bounds read), via unspecified vectors.

6.3CVSS6.6AI score0.00139EPSS

CVE•added 2016/09/25 10:59 a.m.•41 views

CVE-2016-4748

Perl in Apple OS X before 10.12 allows local users to bypass the taint-mode protection mechanism via a crafted environment variable.

5.3CVSS5.9AI score0.00058EPSS

CVE•added 2016/03/24 1:59 a.m.•40 views

CVE-2016-1737

Carbon in Apple OS X before 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted .dfont file.

6.8CVSS6.4AI score0.00741EPSS

CVE•added 2016/05/20 10:59 a.m.•40 views

CVE-2016-1821

IOAudioFamily in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference) via a crafted app.

9.3CVSS8AI score0.01757EPSS

CVE•added 2016/05/20 10:59 a.m.•40 views

CVE-2016-1823

The IOHIDDevice::handleReportWithTime function in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (out-of-bounds read and memory corruption) via a crafted IOHIDRe...

9.3CVSS7.6AI score0.05778EPSS

CVE•added 2016/05/20 10:59 a.m.•40 views

CVE-2016-1831

The kernel in Apple iOS before 9.3.2 and OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

9.3CVSS7.5AI score0.00402EPSS

CVE•added 2016/05/20 11:0 a.m.•40 views

CVE-2016-1853

Tcl in Apple OS X before 10.11.5 allows remote attackers to obtain sensitive information by leveraging SSLv2 support.

7.5CVSS7AI score0.0073EPSS

CVE•added 2016/07/22 2:59 a.m.•40 views

CVE-2016-4601

QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted SGI image.

8.8CVSS9AI score0.00836EPSS

CVE•added 2016/07/22 2:59 a.m.•40 views

CVE-2016-4629

ImageIO in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted xStride and yStride values in an EXR image.

10CVSS9.3AI score0.11075EPSS

CVE•added 2016/03/24 1:59 a.m.•39 views

CVE-2016-1773

The code-signing subsystem in Apple OS X before 10.11.4 does not properly verify file ownership, which allows local users to determine the existence of arbitrary files via unspecified vectors.

3.3CVSS4AI score0.00054EPSS

CVE•added 2016/05/20 10:59 a.m.•39 views

CVE-2016-1793

AppleGraphicsDeviceControlClient in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference) via a crafted app.

9.3CVSS8AI score0.02021EPSS

CVE•added 2016/05/20 10:59 a.m.•39 views

CVE-2016-1796

Apple Type Services (ATS) in Apple OS X before 10.11.5 allows attackers to obtain sensitive kernel memory-layout information or cause a denial of service (out-of-bounds memory access) via a crafted app.

4.3CVSS4.5AI score0.00333EPSS

CVE•added 2016/05/20 10:59 a.m.•39 views

CVE-2016-1810

The Graphics Drivers subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

9.3CVSS8AI score0.00363EPSS

CVE•added 2016/07/22 2:59 a.m.•39 views

CVE-2016-4595

Safari Login AutoFill in Apple OS X before 10.11.6 allows physically proximate attackers to discover passwords by reading the screen during the login procedure.

4.6CVSS6AI score0.00147EPSS

Total number of security vulnerabilities220