Vulnerabilities (CVE)

Filtered by vendor Apple Subscribe
Total 11236 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2016-1848 1 Apple 1 Mac Os X 2016-12-01 6.8 MEDIUM 7.8 HIGH
QuickTime in Apple OS X before 10.11.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file.
CVE-2016-1846 1 Apple 1 Mac Os X 2016-12-01 9.3 HIGH 7.8 HIGH
The nvCommandQueue::GetHandleIndex method in the NVIDIA Graphics Drivers subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference and memory corruption) via a crafted app.
CVE-2016-1816 1 Apple 1 Mac Os X 2016-12-01 9.3 HIGH 7.8 HIGH
IOAcceleratorFamily in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference) via a crafted app.
CVE-2016-1815 1 Apple 1 Mac Os X 2016-12-01 9.3 HIGH 7.8 HIGH
IOAcceleratorFamily in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVE-2016-1812 1 Apple 1 Mac Os X 2016-12-01 9.3 HIGH 7.8 HIGH
Buffer overflow in Intel Graphics Driver in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context via a crafted app.
CVE-2016-1810 1 Apple 1 Mac Os X 2016-12-01 9.3 HIGH 7.8 HIGH
The Graphics Drivers subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVE-2016-1809 1 Apple 1 Mac Os X 2016-12-01 7.8 HIGH 7.5 HIGH
Disk Utility in Apple OS X before 10.11.5 uses incorrect encryption keys for disk images, which has unspecified impact and attack vectors.
CVE-2016-1806 1 Apple 1 Mac Os X 2016-12-01 9.3 HIGH 7.8 HIGH
Crash Reporter in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context via a crafted app.
CVE-2016-1805 1 Apple 1 Mac Os X 2016-12-01 9.3 HIGH 7.8 HIGH
CoreStorage in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context via a crafted app.
CVE-2016-1804 1 Apple 1 Mac Os X 2016-12-01 9.3 HIGH 7.8 HIGH
The Multi-Touch subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVE-2016-1800 1 Apple 1 Mac Os X 2016-12-01 9.3 HIGH 8.8 HIGH
Captive Network Assistant in Apple OS X before 10.11.5 mishandles a custom URL scheme, which allows user-assisted remote attackers to execute arbitrary code via unspecified vectors.
CVE-2016-1799 1 Apple 1 Mac Os X 2016-12-01 9.3 HIGH 7.8 HIGH
Audio in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVE-2016-1798 1 Apple 1 Mac Os X 2016-12-01 4.3 MEDIUM 3.3 LOW
Audio in Apple OS X before 10.11.5 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted app.
CVE-2016-1797 1 Apple 1 Mac Os X 2016-12-01 9.3 HIGH 7.8 HIGH
Apple Type Services (ATS) in Apple OS X before 10.11.5 allows attackers to bypass intended FontValidator sandbox-policy restrictions and execute arbitrary code in a privileged context via a crafted app.
CVE-2016-1796 1 Apple 1 Mac Os X 2016-12-01 4.3 MEDIUM 3.3 LOW
Apple Type Services (ATS) in Apple OS X before 10.11.5 allows attackers to obtain sensitive kernel memory-layout information or cause a denial of service (out-of-bounds memory access) via a crafted app.
CVE-2016-1795 1 Apple 1 Mac Os X 2016-12-01 9.3 HIGH 7.8 HIGH
AppleGraphicsPowerManagement in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVE-2016-1794 1 Apple 1 Mac Os X 2016-12-01 9.3 HIGH 7.8 HIGH
The AppleGraphicsControlClient::checkArguments method in AppleGraphicsControl in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference) via a crafted app.
CVE-2016-1793 1 Apple 1 Mac Os X 2016-12-01 9.3 HIGH 7.8 HIGH
AppleGraphicsDeviceControlClient in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference) via a crafted app.
CVE-2016-1792 1 Apple 1 Mac Os X 2016-12-01 9.3 HIGH 7.8 HIGH
The AMD subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVE-2016-1791 1 Apple 1 Mac Os X 2016-12-01 4.3 MEDIUM 3.3 LOW
The AMD subsystem in Apple OS X before 10.11.5 allows attackers to obtain sensitive kernel memory-layout information via a crafted app.