Vulnerabilities > Apple > MAC OS X > 10.11.0

DATE CVE VULNERABILITY TITLE RISK
2016-05-20 CVE-2016-1847 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Apple products
OpenGL, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
network
apple CWE-119
6.8
2016-05-20 CVE-2016-1846 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Apple mac OS X
The nvCommandQueue::GetHandleIndex method in the NVIDIA Graphics Drivers subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference and memory corruption) via a crafted app.
network
apple CWE-119
critical
9.3
2016-05-20 CVE-2016-1844 Improper Access Control vulnerability in Apple mac OS X
The Messages component in Apple OS X before 10.11.5 mishandles roster changes, which allows remote attackers to modify contact lists via unspecified vectors.
network
low complexity
apple CWE-284
5.0
2016-05-20 CVE-2016-1843 Improper Input Validation vulnerability in Apple mac OS X
The Messages component in Apple OS X before 10.11.5 mishandles filename encoding, which allows remote attackers to obtain sensitive information via unspecified vectors.
network
low complexity
apple CWE-20
5.0
2016-05-20 CVE-2016-1842 Improper Access Control vulnerability in Apple Iphone OS, mac OS X and Watchos
MapKit in Apple iOS before 9.3.2, OS X before 10.11.5, and watchOS before 2.2.1 does not use HTTPS for shared links, which allows remote attackers to obtain sensitive information by sniffing the network for HTTP traffic.
network
low complexity
apple CWE-284
5.0
2016-05-20 CVE-2016-1841 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Apple products
libxslt, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
network
low complexity
apple CWE-119
8.8
2016-05-20 CVE-2016-1840 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products
Heap-based buffer overflow in the xmlFAParsePosCharGroup function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XML document.
6.8
2016-05-20 CVE-2016-1839 Out-of-bounds Read vulnerability in multiple products
The xmlDictAddString function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document.
4.3
2016-05-20 CVE-2016-1838 Out-of-bounds Read vulnerability in multiple products
The xmlPArserPrintFileContextInternal function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document.
4.3
2016-05-20 CVE-2016-1837 Use After Free vulnerability in multiple products
Multiple use-after-free vulnerabilities in the (1) htmlPArsePubidLiteral and (2) htmlParseSystemiteral functions in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allow remote attackers to cause a denial of service via a crafted XML document.
4.3