Apple Macos Sierra vulnerabilities

CVE-2016-6174 [HIGH] CVE-2016-6174: macOS Sierra 10.12 Apple Security Update: About the security content of macOS Sierra 10.12 Product: macOS Sierra Version: 10.12 CVE: CVE-2016-6174 Component: CVE-2016-6174

CVE-2016-1248 [HIGH] CVE-2016-1248: macOS Sierra 10.12.3 Apple Security Update: About the security content of macOS Sierra 10.12.3 Product: macOS Sierra Version: 10.12.3 CVE: CVE-2016-1248 Component: Vim Impact: Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution Description: An input validation issue existed in modelines. This was addressed through improved input validation.

CVE-2017-2370 [HIGH] CVE-2017-2370: macOS Sierra 10.12.3 Apple Security Update: About the security content of macOS Sierra 10.12.3 Product: macOS Sierra Version: 10.12.3 CVE: CVE-2017-2370 Component: Kernel Impact: An application may be able to execute arbitrary code with kernel privileges Description: A buffer overflow issue was addressed through improved memory handling.

CVE-2017-2361 [MEDIUM] CVE-2017-2361: macOS Sierra 10.12.3 Apple Security Update: About the security content of macOS Sierra 10.12.3 Product: macOS Sierra Version: 10.12.3 CVE: CVE-2017-2361 Component: Help Viewer Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: A cross-site scripting issue was addressed through improved URL validation.

CVE-2017-2360 [HIGH] CVE-2017-2360: macOS Sierra 10.12.3 Apple Security Update: About the security content of macOS Sierra 10.12.3 Product: macOS Sierra Version: 10.12.3 CVE: CVE-2017-2360 Component: Kernel Impact: An application may be able to execute arbitrary code with kernel privileges Description: A use after free issue was addressed through improved memory management.

CVE-2017-2353 [HIGH] CVE-2017-2353: macOS Sierra 10.12.3 Apple Security Update: About the security content of macOS Sierra 10.12.3 Product: macOS Sierra Version: 10.12.3 CVE: CVE-2017-2353 Component: Bluetooth Impact: An application may be able to execute arbitrary code with kernel privileges Description: A use after free issue was addressed through improved memory management.

CVE-2016-5771 [CRITICAL] CVE-2016-5771: macOS Sierra 10.12 Apple Security Update: About the security content of macOS Sierra 10.12 Product: macOS Sierra Version: 10.12 CVE: CVE-2016-5771 Component: CVE-2016-5771

CVE-2016-4702 [CRITICAL] CVE-2016-4702: macOS Sierra 10.12 Apple Security Update: About the security content of macOS Sierra 10.12 Product: macOS Sierra Version: 10.12 CVE: CVE-2016-4702 Component: Audio Impact: A remote attacker may be able to execute arbitrary code Description: A memory corruption issue was addressed through improved memory handling.

CVE-2016-4658 [CRITICAL] CVE-2016-4658: macOS Sierra 10.12 Apple Security Update: About the security content of macOS Sierra 10.12 Product: macOS Sierra Version: 10.12 CVE: CVE-2016-4658 Component: Kernel Impact: An application may be able to execute arbitrary code with kernel privileges Description: Multiple memory corruption issues were addressed through improved memory handling.

CVE-2016-4694 [CRITICAL] CVE-2016-4694: macOS Sierra 10.12 Apple Security Update: About the security content of macOS Sierra 10.12 Product: macOS Sierra Version: 10.12 CVE: CVE-2016-4694 Component: About Apple security updates Impact: A remote attacker may be able to proxy traffic through an arbitrary server Description: An issue existed in the handling of the HTTP_PROXY environment variable. This issue was addressed by not setting the HTTP_PROXY environment variable from CGI.

CVE-2016-5772 [CRITICAL] CVE-2016-5772: macOS Sierra 10.12 Apple Security Update: About the security content of macOS Sierra 10.12 Product: macOS Sierra Version: 10.12 CVE: CVE-2016-5772 Component: CVE-2016-5772

CVE-2016-5768 [CRITICAL] CVE-2016-5768: macOS Sierra 10.12 Apple Security Update: About the security content of macOS Sierra 10.12 Product: macOS Sierra Version: 10.12 CVE: CVE-2016-5768 Component: CVE-2016-5768

CVE-2016-5773 [CRITICAL] CVE-2016-5773: macOS Sierra 10.12 Apple Security Update: About the security content of macOS Sierra 10.12 Product: macOS Sierra Version: 10.12 CVE: CVE-2016-5773 Component: CVE-2016-5773

CVE-2016-0755 [HIGH] CVE-2016-0755: macOS Sierra 10.12 Apple Security Update: About the security content of macOS Sierra 10.12 Product: macOS Sierra Version: 10.12 CVE: CVE-2016-0755 Component: CoreDisplay Impact: A user with screen sharing access may be able to view another user's screen Description: A session management issue existed in the handling of screen sharing sessions. This issue was addressed through improved session tracking.

CVE-2016-6296 [CRITICAL] CVE-2016-6296: macOS Sierra 10.12 Apple Security Update: About the security content of macOS Sierra 10.12 Product: macOS Sierra Version: 10.12 CVE: CVE-2016-6296 Component: CVE-2016-6296

CVE-2016-5769 [CRITICAL] CVE-2016-5769: macOS Sierra 10.12 Apple Security Update: About the security content of macOS Sierra 10.12 Product: macOS Sierra Version: 10.12 CVE: CVE-2016-5769 Component: CVE-2016-5769

CVE-2016-4738 [HIGH] CVE-2016-4738: macOS Sierra 10.12 Apple Security Update: About the security content of macOS Sierra 10.12 Product: macOS Sierra Version: 10.12 CVE: CVE-2016-4738 Component: Kernel Impact: An application may be able to execute arbitrary code with kernel privileges Description: Multiple memory corruption issues were addressed through improved memory handling.

CVE-2016-5770 [CRITICAL] CVE-2016-5770: macOS Sierra 10.12 Apple Security Update: About the security content of macOS Sierra 10.12 Product: macOS Sierra Version: 10.12 CVE: CVE-2016-5770 Component: CVE-2016-5770

CVE-2016-8670 [CRITICAL] CVE-2016-8670: macOS Sierra 10.12.3 Apple Security Update: About the security content of macOS Sierra 10.12.3 Product: macOS Sierra Version: 10.12.3 CVE: CVE-2016-8670 Component: CVE-2016-8670

CVE-2016-6297 [HIGH] CVE-2016-6297: macOS Sierra 10.12 Apple Security Update: About the security content of macOS Sierra 10.12 Product: macOS Sierra Version: 10.12 CVE: CVE-2016-6297 Component: CVE-2016-6297