9.2.1

DATE	CVE	VULNERABILITY TITLE	RISK
2016-02-01	CVE-2016-1717	Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Apple products The Disk Images component in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors. local low complexity apple CWE-119	7.8
2016-01-12	CVE-2015-8659	Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products The idle stream handling in nghttp2 before 1.6.0 allows attackers to have unspecified impact via unknown vectors, aka a heap-use-after-free bug. network low complexity apple nghttp2 CWE-119 critical	10.0