Vendor CVEs

Apple Inc.

All CVEs

9,252 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2016-4712	Apple Inc. tvOS	Hig	0.51	7.8	0.03	Sep 25, 2016	CoreCrypto in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows attackers to execute arbitrary code or cause a denial of service (out-of-bounds write) via a crafted app.
CVE-2016-4710	Apple Inc. OS X	Hig	0.51	7.8	0.01	Sep 25, 2016	WindowServer in Apple OS X before 10.12 allows local users to obtain root access via vectors that leverage "type confusion," a different vulnerability than CVE-2016-4709.
CVE-2016-4709	Apple Inc. OS X	Hig	0.51	7.8	0.01	Sep 25, 2016	WindowServer in Apple OS X before 10.12 allows local users to obtain root access via vectors that leverage "type confusion," a different vulnerability than CVE-2016-4710.
CVE-2016-4703	Apple Inc. OS X	Hig	0.51	7.8	0.02	Sep 25, 2016	Bluetooth in Apple OS X before 10.12 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVE-2016-4700	Apple Inc. OS X	Hig	0.51	7.8	0.02	Sep 25, 2016	AppleUUC in Apple OS X before 10.12 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-4699.
CVE-2016-4699	Apple Inc. OS X	Hig	0.51	7.8	0.02	Sep 25, 2016	AppleUUC in Apple OS X before 10.12 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-4700.
CVE-2016-4698	Apple Inc. iOS	Hig	0.51	7.8	0.03	Sep 25, 2016	AppleMobileFileIntegrity in Apple iOS before 10 and OS X before 10.12 mishandles process entitlement and Team ID values in the task port inheritance policy, which allows attackers to execute arbitrary code in a privileged context via a crafted app.
CVE-2016-4697	Apple Inc. OS X	Hig	0.51	7.8	0.02	Sep 25, 2016	Apple HSSPI Support in Apple OS X before 10.12 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVE-2016-4696	Apple Inc. OS X	Hig	0.51	7.8	0.03	Sep 25, 2016	AppleEFIRuntime in Apple OS X before 10.12 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference) via a crafted app.
CVE-2016-4705	Apple Inc. Xcode	Hig	0.51	7.8	0.00	Sep 18, 2016	otool in Apple Xcode before 8 allows local users to gain privileges or cause a denial of service (memory corruption and application crash) via unspecified vectors, a different vulnerability than CVE-2016-4704.
CVE-2016-4704	Apple Inc. Xcode	Hig	0.51	7.8	0.00	Sep 18, 2016	otool in Apple Xcode before 8 allows local users to gain privileges or cause a denial of service (memory corruption and application crash) via unspecified vectors, a different vulnerability than CVE-2016-4705.
CVE-2016-4654	Apple Inc. iOS	Hig	0.51	7.8	0.03	Aug 18, 2016	IOMobileFrameBuffer in Apple iOS before 9.3.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVE-2016-4653	Apple Inc. tvOS	Hig	0.51	7.8	0.00	Jul 22, 2016	The kernel in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1863 and CVE-2016-4582.
CVE-2016-4647	Apple Inc. OS X	Hig	0.51	7.8	0.00	Jul 22, 2016	Audio in Apple OS X before 10.11.6 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted file.
CVE-2016-4640	Apple Inc. OS X	Hig	0.51	7.8	0.02	Jul 22, 2016	Login Window in Apple OS X before 10.11.6 allows attackers to execute arbitrary code in a privileged context, obtain sensitive user information, or cause a denial of service (memory corruption) via a crafted app.
CVE-2016-4638	Apple Inc. OS X	Hig	0.51	7.8	0.02	Jul 22, 2016	Login Window in Apple OS X before 10.11.6 allows attackers to gain privileges via a crafted app that leverages a "type confusion."
CVE-2016-4634	Apple Inc. OS X	Hig	0.51	7.8	0.00	Jul 22, 2016	The Graphics Drivers subsystem in Apple OS X before 10.11.6 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2016-4633	Apple Inc. OS X	Hig	0.51	7.8	0.00	Jul 22, 2016	Intel Graphics Driver in Apple OS X before 10.11.6 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVE-2016-4627	Apple Inc. tvOS	Hig	0.51	7.8	0.00	Jul 22, 2016	IOAcceleratorFamily in Apple iOS before 9.3.3, tvOS before 9.2.2, and watchOS before 2.2.2 allows local users to gain privileges or cause a denial of service (NULL pointer dereference) via unspecified vectors.
CVE-2016-4626	Apple Inc. tvOS	Hig	0.51	7.8	0.00	Jul 22, 2016	IOHIDFamily in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows local users to gain privileges or cause a denial of service (NULL pointer dereference) via unspecified vectors.
CVE-2016-4621	Apple Inc. OS X	Hig	0.51	7.8	0.02	Jul 22, 2016	libc++abi in Apple OS X before 10.11.6 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVE-2016-4599	Apple Inc. Quicktime	Hig	0.51	7.8	0.03	Jul 22, 2016	QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Photoshop document.
CVE-2016-4594	Apple Inc. tvOS	Hig	0.51	7.8	0.02	Jul 22, 2016	The Sandbox Profiles component in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows attackers to access the process list via a crafted app that makes an API call.
CVE-2016-4582	Apple Inc. tvOS	Hig	0.51	7.8	0.00	Jul 22, 2016	The kernel in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1863 and CVE-2016-4653.
CVE-2014-9862	bsdiff bsdiff	Hig	0.51	7.8	0.07	Jul 22, 2016	Integer signedness error in bspatch.c in bspatch in bsdiff, as used in Apple OS X before 10.11.6 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow) via a crafted patch file.
CVE-2016-1850	Apple Inc. SceneKit	Hig	0.51	7.8	0.03	May 20, 2016	SceneKit in Apple OS X before 10.11.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file.
CVE-2016-1832	Apple Inc. tvOS	Hig	0.51	7.8	0.00	May 20, 2016	libc in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2016-1831	Apple Inc. iOS	Hig	0.51	7.8	0.03	May 20, 2016	The kernel in Apple iOS before 9.3.2 and OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVE-2016-1830	Apple Inc. tvOS	Hig	0.51	7.8	0.02	May 20, 2016	The kernel in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than…
CVE-2016-1829	Apple Inc. tvOS	Hig	0.51	7.8	0.03	May 20, 2016	The kernel in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than…
CVE-2016-1826	Apple Inc. OS X	Hig	0.51	7.8	0.04	May 20, 2016	Integer overflow in the dtrace implementation in the kernel in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context via a crafted app.
CVE-2016-1824	Apple Inc. tvOS	Hig	0.51	7.8	0.03	May 20, 2016	IOHIDFamily in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than…
CVE-2016-1822	Apple Inc. OS X	Hig	0.51	7.8	0.03	May 20, 2016	IOFireWireFamily in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVE-2016-1820	Apple Inc. OS X	Hig	0.51	7.8	0.04	May 20, 2016	Buffer overflow in IOAudioFamily in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context via a crafted app.
CVE-2016-1818	Apple Inc. tvOS	Hig	0.51	7.8	0.04	May 20, 2016	IOAcceleratorFamily in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than…
CVE-2016-1817	Apple Inc. tvOS	Hig	0.51	7.8	0.04	May 20, 2016	IOAcceleratorFamily in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than…
CVE-2016-1816	Apple Inc. OS X	Hig	0.51	7.8	0.03	May 20, 2016	IOAcceleratorFamily in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference) via a crafted app.
CVE-2016-1815	Apple Inc. OS X	Hig	0.51	7.8	0.03	May 20, 2016	IOAcceleratorFamily in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVE-2016-1812	Apple Inc. OS X	Hig	0.51	7.8	0.03	May 20, 2016	Buffer overflow in Intel Graphics Driver in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context via a crafted app.
CVE-2016-1810	Apple Inc. OS X	Hig	0.51	7.8	0.02	May 20, 2016	The Graphics Drivers subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVE-2016-1808	Apple Inc. tvOS	Hig	0.51	7.8	0.03	May 20, 2016	The Disk Images subsystem in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVE-2016-1806	Apple Inc. OS X	Hig	0.51	7.8	0.03	May 20, 2016	Crash Reporter in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context via a crafted app.
CVE-2016-1805	Apple Inc. OS X	Hig	0.51	7.8	0.02	May 20, 2016	CoreStorage in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context via a crafted app.
CVE-2016-1804	Apple Inc. OS X	Hig	0.51	7.8	0.03	May 20, 2016	The Multi-Touch subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVE-2016-1799	Apple Inc. OS X	Hig	0.51	7.8	0.02	May 20, 2016	Audio in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVE-2016-1797	Apple Inc. Type Services	Hig	0.51	7.8	0.03	May 20, 2016	Apple Type Services (ATS) in Apple OS X before 10.11.5 allows attackers to bypass intended FontValidator sandbox-policy restrictions and execute arbitrary code in a privileged context via a crafted app.
CVE-2016-1795	Apple Inc. OS X	Hig	0.51	7.8	0.02	May 20, 2016	AppleGraphicsPowerManagement in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVE-2016-1792	Apple Inc. OS X	Hig	0.51	7.8	0.02	May 20, 2016	The AMD subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVE-2016-1742	Apple Inc. iTunes	Hig	0.51	7.8	0.00	May 20, 2016	Untrusted search path vulnerability in the installer in Apple iTunes before 12.4 allows local users to gain privileges via a Trojan horse DLL in the current working directory.
CVE-2016-1775	Apple Inc. tvOS	Hig	0.51	7.8	0.07	Mar 24, 2016	TrueTypeScaler in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file.

CVE-2016-4712HigSep 25, 2016
Apple Inc.
tvOS
risk 0.51cvss 7.8epss 0.03
CoreCrypto in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows attackers to execute arbitrary code or cause a denial of service (out-of-bounds write) via a crafted app.
CVE-2016-4710HigSep 25, 2016
Apple Inc.
OS X
risk 0.51cvss 7.8epss 0.01
WindowServer in Apple OS X before 10.12 allows local users to obtain root access via vectors that leverage "type confusion," a different vulnerability than CVE-2016-4709.
CVE-2016-4709HigSep 25, 2016
Apple Inc.
OS X
risk 0.51cvss 7.8epss 0.01
WindowServer in Apple OS X before 10.12 allows local users to obtain root access via vectors that leverage "type confusion," a different vulnerability than CVE-2016-4710.
CVE-2016-4703HigSep 25, 2016
Apple Inc.
OS X
risk 0.51cvss 7.8epss 0.02
Bluetooth in Apple OS X before 10.12 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVE-2016-4700HigSep 25, 2016
Apple Inc.
OS X
risk 0.51cvss 7.8epss 0.02
AppleUUC in Apple OS X before 10.12 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-4699.
CVE-2016-4699HigSep 25, 2016
Apple Inc.
OS X
risk 0.51cvss 7.8epss 0.02
AppleUUC in Apple OS X before 10.12 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-4700.
CVE-2016-4698HigSep 25, 2016
Apple Inc.
iOS
risk 0.51cvss 7.8epss 0.03
AppleMobileFileIntegrity in Apple iOS before 10 and OS X before 10.12 mishandles process entitlement and Team ID values in the task port inheritance policy, which allows attackers to execute arbitrary code in a privileged context via a crafted app.
CVE-2016-4697HigSep 25, 2016
Apple Inc.
OS X
risk 0.51cvss 7.8epss 0.02
Apple HSSPI Support in Apple OS X before 10.12 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVE-2016-4696HigSep 25, 2016
Apple Inc.
OS X
risk 0.51cvss 7.8epss 0.03
AppleEFIRuntime in Apple OS X before 10.12 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference) via a crafted app.
CVE-2016-4705HigSep 18, 2016
Apple Inc.
Xcode
risk 0.51cvss 7.8epss 0.00
otool in Apple Xcode before 8 allows local users to gain privileges or cause a denial of service (memory corruption and application crash) via unspecified vectors, a different vulnerability than CVE-2016-4704.
CVE-2016-4704HigSep 18, 2016
Apple Inc.
Xcode
risk 0.51cvss 7.8epss 0.00
otool in Apple Xcode before 8 allows local users to gain privileges or cause a denial of service (memory corruption and application crash) via unspecified vectors, a different vulnerability than CVE-2016-4705.
CVE-2016-4654HigAug 18, 2016
Apple Inc.
iOS
risk 0.51cvss 7.8epss 0.03
IOMobileFrameBuffer in Apple iOS before 9.3.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVE-2016-4653HigJul 22, 2016
Apple Inc.
tvOS
risk 0.51cvss 7.8epss 0.00
The kernel in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1863 and CVE-2016-4582.
CVE-2016-4647HigJul 22, 2016
Apple Inc.
OS X
risk 0.51cvss 7.8epss 0.00
Audio in Apple OS X before 10.11.6 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted file.
CVE-2016-4640HigJul 22, 2016
Apple Inc.
OS X
risk 0.51cvss 7.8epss 0.02
Login Window in Apple OS X before 10.11.6 allows attackers to execute arbitrary code in a privileged context, obtain sensitive user information, or cause a denial of service (memory corruption) via a crafted app.
CVE-2016-4638HigJul 22, 2016
Apple Inc.
OS X
risk 0.51cvss 7.8epss 0.02
Login Window in Apple OS X before 10.11.6 allows attackers to gain privileges via a crafted app that leverages a "type confusion."
CVE-2016-4634HigJul 22, 2016
Apple Inc.
OS X
risk 0.51cvss 7.8epss 0.00
The Graphics Drivers subsystem in Apple OS X before 10.11.6 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2016-4633HigJul 22, 2016
Apple Inc.
OS X
risk 0.51cvss 7.8epss 0.00
Intel Graphics Driver in Apple OS X before 10.11.6 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVE-2016-4627HigJul 22, 2016
Apple Inc.
tvOS
risk 0.51cvss 7.8epss 0.00
IOAcceleratorFamily in Apple iOS before 9.3.3, tvOS before 9.2.2, and watchOS before 2.2.2 allows local users to gain privileges or cause a denial of service (NULL pointer dereference) via unspecified vectors.
CVE-2016-4626HigJul 22, 2016
Apple Inc.
tvOS
risk 0.51cvss 7.8epss 0.00
IOHIDFamily in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows local users to gain privileges or cause a denial of service (NULL pointer dereference) via unspecified vectors.
CVE-2016-4621HigJul 22, 2016
Apple Inc.
OS X
risk 0.51cvss 7.8epss 0.02
libc++abi in Apple OS X before 10.11.6 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVE-2016-4599HigJul 22, 2016
Apple Inc.
Quicktime
risk 0.51cvss 7.8epss 0.03
QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Photoshop document.
CVE-2016-4594HigJul 22, 2016
Apple Inc.
tvOS
risk 0.51cvss 7.8epss 0.02
The Sandbox Profiles component in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows attackers to access the process list via a crafted app that makes an API call.
CVE-2016-4582HigJul 22, 2016
Apple Inc.
tvOS
risk 0.51cvss 7.8epss 0.00
The kernel in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1863 and CVE-2016-4653.
CVE-2014-9862HigJul 22, 2016
bsdiff
bsdiff
risk 0.51cvss 7.8epss 0.07
Integer signedness error in bspatch.c in bspatch in bsdiff, as used in Apple OS X before 10.11.6 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow) via a crafted patch file.
CVE-2016-1850HigMay 20, 2016
Apple Inc.
SceneKit
risk 0.51cvss 7.8epss 0.03
SceneKit in Apple OS X before 10.11.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file.
CVE-2016-1832HigMay 20, 2016
Apple Inc.
tvOS
risk 0.51cvss 7.8epss 0.00
libc in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2016-1831HigMay 20, 2016
Apple Inc.
iOS
risk 0.51cvss 7.8epss 0.03
The kernel in Apple iOS before 9.3.2 and OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVE-2016-1830HigMay 20, 2016
Apple Inc.
tvOS
risk 0.51cvss 7.8epss 0.02
The kernel in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than…
CVE-2016-1829HigMay 20, 2016
Apple Inc.
tvOS
risk 0.51cvss 7.8epss 0.03
The kernel in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than…
CVE-2016-1826HigMay 20, 2016
Apple Inc.
OS X
risk 0.51cvss 7.8epss 0.04
Integer overflow in the dtrace implementation in the kernel in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context via a crafted app.
CVE-2016-1824HigMay 20, 2016
Apple Inc.
tvOS
risk 0.51cvss 7.8epss 0.03
IOHIDFamily in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than…
CVE-2016-1822HigMay 20, 2016
Apple Inc.
OS X
risk 0.51cvss 7.8epss 0.03
IOFireWireFamily in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVE-2016-1820HigMay 20, 2016
Apple Inc.
OS X
risk 0.51cvss 7.8epss 0.04
Buffer overflow in IOAudioFamily in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context via a crafted app.
CVE-2016-1818HigMay 20, 2016
Apple Inc.
tvOS
risk 0.51cvss 7.8epss 0.04
IOAcceleratorFamily in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than…
CVE-2016-1817HigMay 20, 2016
Apple Inc.
tvOS
risk 0.51cvss 7.8epss 0.04
IOAcceleratorFamily in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than…
CVE-2016-1816HigMay 20, 2016
Apple Inc.
OS X
risk 0.51cvss 7.8epss 0.03
IOAcceleratorFamily in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference) via a crafted app.
CVE-2016-1815HigMay 20, 2016
Apple Inc.
OS X
risk 0.51cvss 7.8epss 0.03
IOAcceleratorFamily in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVE-2016-1812HigMay 20, 2016
Apple Inc.
OS X
risk 0.51cvss 7.8epss 0.03
Buffer overflow in Intel Graphics Driver in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context via a crafted app.
CVE-2016-1810HigMay 20, 2016
Apple Inc.
OS X
risk 0.51cvss 7.8epss 0.02
The Graphics Drivers subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVE-2016-1808HigMay 20, 2016
Apple Inc.
tvOS
risk 0.51cvss 7.8epss 0.03
The Disk Images subsystem in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVE-2016-1806HigMay 20, 2016
Apple Inc.
OS X
risk 0.51cvss 7.8epss 0.03
Crash Reporter in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context via a crafted app.
CVE-2016-1805HigMay 20, 2016
Apple Inc.
OS X
risk 0.51cvss 7.8epss 0.02
CoreStorage in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context via a crafted app.
CVE-2016-1804HigMay 20, 2016
Apple Inc.
OS X
risk 0.51cvss 7.8epss 0.03
The Multi-Touch subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVE-2016-1799HigMay 20, 2016
Apple Inc.
OS X
risk 0.51cvss 7.8epss 0.02
Audio in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVE-2016-1797HigMay 20, 2016
Apple Inc.
Type Services
risk 0.51cvss 7.8epss 0.03
Apple Type Services (ATS) in Apple OS X before 10.11.5 allows attackers to bypass intended FontValidator sandbox-policy restrictions and execute arbitrary code in a privileged context via a crafted app.
CVE-2016-1795HigMay 20, 2016
Apple Inc.
OS X
risk 0.51cvss 7.8epss 0.02
AppleGraphicsPowerManagement in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVE-2016-1792HigMay 20, 2016
Apple Inc.
OS X
risk 0.51cvss 7.8epss 0.02
The AMD subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVE-2016-1742HigMay 20, 2016
Apple Inc.
iTunes
risk 0.51cvss 7.8epss 0.00
Untrusted search path vulnerability in the installer in Apple iTunes before 12.4 allows local users to gain privileges via a Trojan horse DLL in the current working directory.
CVE-2016-1775HigMar 24, 2016
Apple Inc.
tvOS
risk 0.51cvss 7.8epss 0.07
TrueTypeScaler in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file.

Page 49 of 186