CVE-2016-4711
- EPSS 0.49%
- Veröffentlicht 25.09.2016 10:59:18
- Zuletzt bearbeitet 12.04.2025 10:46:40
CCrypt in corecrypto in CommonCrypto in Apple iOS before 10 and OS X before 10.12 allows attackers to discover cleartext information by leveraging a function call that specifies the same buffer for input and output.
CVE-2016-4710
- EPSS 0.05%
- Veröffentlicht 25.09.2016 10:59:17
- Zuletzt bearbeitet 12.04.2025 10:46:40
WindowServer in Apple OS X before 10.12 allows local users to obtain root access via vectors that leverage "type confusion," a different vulnerability than CVE-2016-4709.
CVE-2016-4709
- EPSS 0.05%
- Veröffentlicht 25.09.2016 10:59:16
- Zuletzt bearbeitet 12.04.2025 10:46:40
WindowServer in Apple OS X before 10.12 allows local users to obtain root access via vectors that leverage "type confusion," a different vulnerability than CVE-2016-4710.
CVE-2016-4708
- EPSS 4.17%
- Veröffentlicht 25.09.2016 10:59:15
- Zuletzt bearbeitet 12.04.2025 10:46:40
CFNetwork in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 misparses the Set-Cookie header, which allows remote attackers to obtain sensitive information via a crafted HTTP response.
- EPSS 0.06%
- Veröffentlicht 25.09.2016 10:59:14
- Zuletzt bearbeitet 12.04.2025 10:46:40
CFNetwork in Apple iOS before 10 and OS X before 10.12 mishandles Local Storage deletion, which allows local users to discover the visited web sites of arbitrary users via unspecified vectors.
CVE-2016-4706
- EPSS 0.05%
- Veröffentlicht 25.09.2016 10:59:13
- Zuletzt bearbeitet 12.04.2025 10:46:40
cd9660 in Apple OS X before 10.12 allows local users to cause a denial of service via unspecified vectors.
CVE-2016-4703
- EPSS 0.22%
- Veröffentlicht 25.09.2016 10:59:12
- Zuletzt bearbeitet 12.04.2025 10:46:40
Bluetooth in Apple OS X before 10.12 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
- EPSS 14.12%
- Veröffentlicht 25.09.2016 10:59:11
- Zuletzt bearbeitet 12.04.2025 10:46:40
Audio in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2016-4701
- EPSS 0.06%
- Veröffentlicht 25.09.2016 10:59:09
- Zuletzt bearbeitet 12.04.2025 10:46:40
Application Firewall in Apple OS X before 10.12 allows local users to cause a denial of service via vectors involving a crafted SO_EXECPATH environment variable.
CVE-2016-4700
- EPSS 0.23%
- Veröffentlicht 25.09.2016 10:59:08
- Zuletzt bearbeitet 12.04.2025 10:46:40
AppleUUC in Apple OS X before 10.12 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-4699.