Latest CVE Feed
-
7.8
HIGHCVE-2016-1751
The kernel in Apple iOS before 9.3, tvOS before 9.2, and watchOS before 2.2 does not properly restrict the execute permission, which allows attackers to bypass a code-signing protection mechanism via a crafted app.... Read more
- Published: Mar. 24, 2016
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2016-1750
Use-after-free vulnerability in the kernel in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows attackers to execute arbitrary code in a privileged context via a crafted app.... Read more
- Published: Mar. 24, 2016
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2016-1749
IOUSBFamily in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.... Read more
- Published: Mar. 24, 2016
- Modified: Apr. 12, 2025
-
4.3
MEDIUMCVE-2016-1748
IOHIDFamily in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows attackers to obtain sensitive kernel memory-layout information via a crafted app.... Read more
- Published: Mar. 24, 2016
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2016-1747
IOGraphics in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1746.... Read more
- Published: Mar. 24, 2016
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2016-1746
IOGraphics in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1747.... Read more
- Published: Mar. 24, 2016
- Modified: Apr. 12, 2025
-
5.5
MEDIUMCVE-2016-1745
IOFireWireFamily in Apple OS X before 10.11.4 allows local users to cause a denial of service (NULL pointer dereference) via unspecified vectors.... Read more
- Published: Mar. 24, 2016
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2016-1744
The Intel driver in the Graphics Drivers subsystem in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-... Read more
- Published: Mar. 24, 2016
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2016-1743
The Intel driver in the Graphics Drivers subsystem in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-... Read more
- Published: Mar. 24, 2016
- Modified: Apr. 12, 2025
-
10.0
HIGHCVE-2016-1741
The NVIDIA driver in the Graphics Drivers subsystem in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.... Read more
- Published: Mar. 24, 2016
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2016-1740
FontParser in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document.... Read more
- Published: Mar. 24, 2016
- Modified: Apr. 12, 2025
-
7.8
HIGHCVE-2016-1738
dyld in Apple OS X before 10.11.4 allows attackers to bypass a code-signing protection mechanism via a modified app.... Read more
- Published: Mar. 24, 2016
- Modified: Apr. 12, 2025
-
6.8
MEDIUMCVE-2016-1737
Carbon in Apple OS X before 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted .dfont file.... Read more
- Published: Mar. 24, 2016
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2016-1736
Bluetooth in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1735.... Read more
- Published: Mar. 24, 2016
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2016-1735
Bluetooth in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1736.... Read more
- Published: Mar. 24, 2016
- Modified: Apr. 12, 2025
-
7.2
HIGHCVE-2016-1734
AppleUSBNetworking in Apple iOS before 9.3 and OS X before 10.11.4 allows physically proximate attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted USB device.... Read more
- Published: Mar. 24, 2016
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2016-1733
AppleRAID in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.... Read more
- Published: Mar. 24, 2016
- Modified: Apr. 12, 2025
-
5.5
MEDIUMCVE-2016-1732
AppleRAID in Apple OS X before 10.11.4 allows local users to obtain sensitive kernel memory-layout information or cause a denial of service (out-of-bounds read) via unspecified vectors.... Read more
- Published: Mar. 24, 2016
- Modified: Apr. 12, 2025
-
6.1
MEDIUMCVE-2016-1599
Cross-site scripting (XSS) vulnerability in NetIQ Self Service Password Reset (SSPR) 2.x and 3.x before 3.3.1 HF2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.... Read more
- Published: Mar. 24, 2016
- Modified: Apr. 12, 2025
-
8.4
HIGHCVE-2015-7551
The Fiddle::Handle implementation in ext/fiddle/handle.c in Ruby before 2.0.0-p648, 2.1 before 2.1.8, and 2.2 before 2.2.4, as distributed in Apple OS X before 10.11.4 and other products, mishandles tainting, which allows context-dependent attackers to ex... Read more
- Published: Mar. 24, 2016
- Modified: Apr. 12, 2025