Lucene search

K

308 matches found

CVE
CVE
added 2017/02/20 8:59 a.m.42 views

CVE-2016-4617

An issue was discovered in certain Apple products. macOS before 10.12 is affected. The issue involves a sandbox escape related to launchctl process spawning in the "libxpc" component.

8.8CVSS7.8AI score0.00058EPSS
CVE
CVE
added 2017/02/20 8:59 a.m.42 views

CVE-2016-4682

An issue was discovered in certain Apple products. macOS before 10.12 is affected. macOS before 10.12.1 is affected. The issue involves the "ImageIO" component. It allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and application crash) via a c...

7.1CVSS6.2AI score0.0027EPSS
CVE
CVE
added 2017/05/22 5:29 a.m.42 views

CVE-2017-6978

An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "Accessibility Framework" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

9.3CVSS8.1AI score0.01537EPSS
CVE
CVE
added 2017/05/22 5:29 a.m.42 views

CVE-2017-6988

An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "802.1X" component. It allows remote attackers to discover the network credentials of arbitrary users by operating a crafted network that requires 802.1X authentication, because EAP-TLS certi...

5.9CVSS6.2AI score0.00163EPSS
CVE
CVE
added 2017/02/20 8:59 a.m.41 views

CVE-2016-7580

An issue was discovered in certain Apple products. macOS before 10.12 is affected. The issue involves the "Mail" component, which allows remote web servers to cause a denial of service via a crafted URL.

6.5CVSS6.4AI score0.00331EPSS
CVE
CVE
added 2017/05/22 5:29 a.m.41 views

CVE-2017-2534

An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "Speech Framework" component. It allows attackers to conduct sandbox-escape attacks via a crafted app.

8.6CVSS6.8AI score0.00217EPSS
CVE
CVE
added 2017/05/22 5:29 a.m.41 views

CVE-2017-2546

An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

9.3CVSS8.1AI score0.00247EPSS
CVE
CVE
added 2017/05/22 5:29 a.m.38 views

CVE-2017-2543

An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "Multi-Touch" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

9.3CVSS7.7AI score0.00247EPSS
Total number of security vulnerabilities308