7.8

CVE-2016-4594

The Sandbox Profiles component in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows attackers to access the process list via a crafted app that makes an API call.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apple ≫ iPhone OS Version < 9.3.3
Apple ≫ macOS X Version < 10.11.6
Apple ≫ tvOS Version < 9.2.2
Apple ≫ watchOS Version < 2.2.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.25% 0.656
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvd@nist.gov 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html
Vendor Advisory
Mailing List
http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html
Vendor Advisory
Mailing List
http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html
Vendor Advisory
Mailing List
http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html
Vendor Advisory
Mailing List
https://support.apple.com/HT206902
Vendor Advisory
https://support.apple.com/HT206903
Vendor Advisory
https://support.apple.com/HT206904
Vendor Advisory
https://support.apple.com/HT206905
Vendor Advisory
http://www.securitytracker.com/id/1036344
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/91834
Third Party Advisory
VDB Entry