Vulnerabilities > Apple > MAC OS X > 10.12.4

DATE CVE VULNERABILITY TITLE RISK
2017-05-22 CVE-2017-2522 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Apple products
An issue was discovered in certain Apple products.
network
low complexity
apple CWE-119
critical
9.8
2017-05-22 CVE-2017-2521 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Apple products
An issue was discovered in certain Apple products.
network
low complexity
apple CWE-119
8.8
2017-05-22 CVE-2017-2520 Out-of-bounds Write vulnerability in multiple products
An issue was discovered in certain Apple products.
network
low complexity
apple debian CWE-787
critical
9.8
2017-05-22 CVE-2017-2519 An issue was discovered in certain Apple products.
network
low complexity
apple debian
critical
9.8
2017-05-22 CVE-2017-2518 Use After Free vulnerability in multiple products
An issue was discovered in certain Apple products.
network
low complexity
apple debian CWE-416
critical
9.8
2017-05-22 CVE-2017-2507 Information Exposure vulnerability in Apple products
An issue was discovered in certain Apple products.
local
low complexity
apple CWE-200
5.5
2017-05-22 CVE-2017-2502 Unspecified vulnerability in Apple products
An issue was discovered in certain Apple products.
local
low complexity
apple
5.5
2017-05-22 CVE-2017-2501 Race Condition vulnerability in Apple products
An issue was discovered in certain Apple products.
local
high complexity
apple CWE-362
7.0
2017-03-27 CVE-2017-6458 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products
Multiple buffer overflows in the ctl_put* functions in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allow remote authenticated users to have unspecified impact via a long variable.
network
low complexity
ntp hpe apple siemens CWE-119
8.8
2016-09-25 CVE-2016-4778 Permissions, Privileges, and Access Controls vulnerability in Apple products
The kernel in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
local
low complexity
apple CWE-264
7.8