Lucene search

K
AppleMac Os X10.12.0

18 matches found

CVE
CVE
added 2017/06/20 1:29 a.m.6009 views

CVE-2017-7668

The HTTP strict parsing changes added in Apache httpd 2.2.32 and 2.4.24 introduced a bug in token list parsing, which allows ap_find_token() to search past the end of its input string. By maliciously crafting a sequence of request headers, an attacker may be able to cause a segmentation fault, or t...

7.5CVSS8.4AI score0.53245EPSS
CVE
CVE
added 2017/02/20 8:59 a.m.57 views

CVE-2016-4663

An issue was discovered in certain Apple products. macOS before 10.12.1 is affected. The issue involves the "NVIDIA Graphics Drivers" component. It allows attackers to cause a denial of service (memory corruption) via a crafted app.

5.5CVSS5.1AI score0.00191EPSS
CVE
CVE
added 2017/02/20 8:59 a.m.57 views

CVE-2016-4671

An issue was discovered in certain Apple products. macOS before 10.12.1 is affected. The issue involves the "ImageIO" component. It allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write and application crash) via a crafted PDF file.

9.3CVSS7.7AI score0.00798EPSS
CVE
CVE
added 2017/02/20 8:59 a.m.55 views

CVE-2016-4681

An issue was discovered in certain Apple products. macOS before 10.12.1 is affected. The issue involves the "Core Image" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted JPEG file.

7.8CVSS7.8AI score0.00518EPSS
CVE
CVE
added 2017/02/20 8:59 a.m.55 views

CVE-2016-7584

An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. tvOS before 10.0.1 is affected. watchOS before 3.1 is affected. The issue involves the "AppleMobileFileIntegrity" component, which allows remote attackers to spoof signed code by using ...

7.8CVSS6.6AI score0.00289EPSS
CVE
CVE
added 2017/02/20 8:59 a.m.52 views

CVE-2016-4678

An issue was discovered in certain Apple products. macOS before 10.12.1 is affected. The issue involves the "AppleSMC" component. It allows local users to gain privileges or cause a denial of service (NULL pointer dereference) via unspecified vectors.

7.8CVSS6.8AI score0.00054EPSS
CVE
CVE
added 2017/02/20 8:59 a.m.52 views

CVE-2016-7613

An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. tvOS before 10.0.1 is affected. watchOS before 3.1 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context via a cr...

9.3CVSS7.1AI score0.00157EPSS
CVE
CVE
added 2017/02/20 8:59 a.m.51 views

CVE-2016-4660

An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. tvOS before 10.0.1 is affected. watchOS before 3.1 is affected. The issue involves the "FontParser" component. It allows remote attackers to obtain sensitive information or cause a deni...

7.1CVSS6.3AI score0.01009EPSS
CVE
CVE
added 2017/02/20 8:59 a.m.49 views

CVE-2016-4674

An issue was discovered in certain Apple products. macOS before 10.12.1 is affected. The issue involves the "ATS" component. It allows local users to gain privileges or cause a denial of service (memory corruption and application crash) via unspecified vectors.

7.8CVSS7.2AI score0.00067EPSS
CVE
CVE
added 2017/02/20 8:59 a.m.47 views

CVE-2016-4683

An issue was discovered in certain Apple products. macOS before 10.12.1 is affected. The issue involves the "ImageIO" component. It allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds memory access and application crash) via a crafted SGI file.

7.8CVSS7.7AI score0.00639EPSS
CVE
CVE
added 2017/02/20 8:59 a.m.47 views

CVE-2016-7577

An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. The issue involves the "FaceTime" component, which allows remote attackers to trigger memory corruption and obtain audio data from a call that appeared to have ended.

4.3CVSS4.7AI score0.0026EPSS
CVE
CVE
added 2017/02/20 8:59 a.m.46 views

CVE-2016-4670

An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. The issue involves the "Security" component. It allows local users to discover lengths of arbitrary passwords by reading a log.

3.3CVSS4.3AI score0.0006EPSS
CVE
CVE
added 2017/02/20 8:59 a.m.45 views

CVE-2016-4667

An issue was discovered in certain Apple products. macOS before 10.12.1 is affected. The issue involves the "ATS" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted font.

8.8CVSS8.2AI score0.00958EPSS
CVE
CVE
added 2017/02/20 8:59 a.m.45 views

CVE-2016-4780

An issue was discovered in certain Apple products. macOS before 10.12.1 is affected. The issue involves the "Thunderbolt" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference) via a crafted app.

9.3CVSS7.5AI score0.00402EPSS
CVE
CVE
added 2017/02/20 8:59 a.m.44 views

CVE-2016-4661

An issue was discovered in certain Apple products. macOS before 10.12.1 is affected. The issue involves the "ntfs" component, which misparses disk images and allows attackers to cause a denial of service via a crafted app.

5.5CVSS5.2AI score0.00164EPSS
CVE
CVE
added 2017/02/20 8:59 a.m.44 views

CVE-2016-4662

An issue was discovered in certain Apple products. macOS before 10.12.1 is affected. The issue involves the "AppleGraphicsControl" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

9.3CVSS7.4AI score0.00183EPSS
CVE
CVE
added 2017/02/20 8:59 a.m.44 views

CVE-2016-4721

An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. The issue involves the "IDS - Connectivity" component, which allows man-in-the-middle attackers to spoof calls via a "switch caller" notification.

5.9CVSS4.9AI score0.00263EPSS
CVE
CVE
added 2017/02/20 8:59 a.m.43 views

CVE-2016-4682

An issue was discovered in certain Apple products. macOS before 10.12 is affected. macOS before 10.12.1 is affected. The issue involves the "ImageIO" component. It allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and application crash) via a c...

7.1CVSS6.2AI score0.0027EPSS