deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-4587
Published: 2016-07-22
Description: WebKit in Apple iOS before 9.3.3 and tvOS before 9.2.2 allows remote attackers to obtain sensitive information from uninitialized process memory via a crafted web site.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html; http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html; http://packetstormsecurity.com/files/138502/WebKitGTK-SOP-Bypass-Information-Disclosure.html
CVE: CVE-2016-4588
Published: 2016-07-22
Description: WebKit in Apple tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html; http://packetstormsecurity.com/files/138502/WebKitGTK-SOP-Bypass-Information-Disclosure.html; http://www.securityfocus.com/archive/1/539295/100/0/threaded
CVE: CVE-2016-4589
Published: 2016-07-22
Description: WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-4622, CVE-2016-4623, and CVE-2016-4624.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html; http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html; http://lists.apple.com/archives/security-announce/2016/Jul/msg00004.html
CVE: CVE-2016-4590
Published: 2016-07-22
Description: WebKit in Apple iOS before 9.3.3 and Safari before 9.1.2 mishandles about: URLs, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-20
References: http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html; http://lists.apple.com/archives/security-announce/2016/Jul/msg00004.html; http://packetstormsecurity.com/files/138502/WebKitGTK-SOP-Bypass-Information-Disclosure.html
CVE: CVE-2016-4591
Published: 2016-07-22
Description: WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 mishandles the location variable, which allows remote attackers to access the local filesystem via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html; http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html; http://lists.apple.com/archives/security-announce/2016/Jul/msg00004.html
CVE: CVE-2016-4592
Published: 2016-07-22
Description: WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to cause a denial of service (memory consumption) via a crafted web site.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400
References: http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html; http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html; http://lists.apple.com/archives/security-announce/2016/Jul/msg00004.html
CVE: CVE-2016-4593
Published: 2016-07-22
Description: The Siri Contacts component in Apple iOS before 9.3.3 allows physically proximate attackers to read arbitrary Contact card information via unspecified vectors.
CVSS Score: 2.4 (LOW)
CWE: CWE-200
References: http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html; http://www.securityfocus.com/bid/91825; http://www.securitytracker.com/id/1036344
CVE: CVE-2016-4594
Published: 2016-07-22
Description: The Sandbox Profiles component in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows attackers to access the process list via a crafted app that makes an API call.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html; http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html
CVE: CVE-2016-4595
Published: 2016-07-22
Description: Safari Login AutoFill in Apple OS X before 10.11.6 allows physically proximate attackers to discover passwords by reading the screen during the login procedure.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-200
References: http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html; http://www.securityfocus.com/bid/91824; http://www.securitytracker.com/id/1036348
CVE: CVE-2016-4596
Published: 2016-07-22
Description: QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FlashPix bitmap image, a different vulnerability than CVE-2016-4597, CVE-2016-4600, and CVE-2016-4602.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html; http://www.securityfocus.com/bid/91824; http://www.securitytracker.com/id/1036348
CVE: CVE-2016-4597
Published: 2016-07-22
Description: QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FlashPix bitmap image, a different vulnerability than CVE-2016-4596, CVE-2016-4600, and CVE-2016-4602.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html; http://www.securityfocus.com/bid/91824; http://www.securitytracker.com/id/1036348
CVE: CVE-2016-4598
Published: 2016-07-22
Description: QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted image.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html; http://www.securityfocus.com/bid/91824; http://www.securitytracker.com/id/1036348
CVE: CVE-2016-4599
Published: 2016-07-22
Description: QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Photoshop document.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html; http://www.securityfocus.com/bid/91824; http://www.securitytracker.com/id/1036348
CVE: CVE-2016-4600
Published: 2016-07-22
Description: QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FlashPix bitmap image, a different vulnerability than CVE-2016-4596, CVE-2016-4597, and CVE-2016-4602.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html; http://www.securityfocus.com/bid/91824; http://www.securitytracker.com/id/1036348
CVE: CVE-2016-4601
Published: 2016-07-22
Description: QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted SGI image.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html; http://www.securityfocus.com/bid/91824; http://www.securitytracker.com/id/1036348
CVE: CVE-2016-4602
Published: 2016-07-22
Description: QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FlashPix bitmap image, a different vulnerability than CVE-2016-4596, CVE-2016-4597, and CVE-2016-4600.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html; http://www.securityfocus.com/bid/91824; http://www.securitytracker.com/id/1036348
CVE: CVE-2016-4603
Published: 2016-07-22
Description: Web Media in Apple iOS before 9.3.3 allows attackers to bypass the Private Browsing protection mechanism and obtain sensitive video URL information by leveraging Safari View Controller misbehavior.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-254
References: http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html; http://www.securityfocus.com/bid/91825; http://www.securitytracker.com/id/1036344
CVE: CVE-2016-4604
Published: 2016-07-22
Description: Safari in Apple iOS before 9.3.3 allows remote attackers to spoof the displayed URL via an HTTP response specifying redirection to an invalid TCP port number.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-601
References: http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html; http://www.securityfocus.com/bid/91825; http://www.securitytracker.com/id/1036344
CVE: CVE-2016-4605
Published: 2016-07-22
Description: Calendar in Apple iOS before 9.3.3 allows remote attackers to cause a denial of service (NULL pointer dereference and device restart) via a crafted invitation.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html; http://www.securityfocus.com/bid/91825; http://www.securitytracker.com/id/1036344
CVE: CVE-2016-4607
Published: 2016-07-22
Description: libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2016-4608, CVE-2016-4609, CVE-2016-4610, and CVE-2016-4612.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html; http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html
CVE: CVE-2016-4608
Published: 2016-07-22
Description: libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2016-4607, CVE-2016-4609, CVE-2016-4610, and CVE-2016-4612.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html; http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html
CVE: CVE-2016-4609
Published: 2016-07-22
Description: libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2016-4607, CVE-2016-4608, CVE-2016-4610, and CVE-2016-4612.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html; http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html
CVE: CVE-2016-4610
Published: 2016-07-22
Description: libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2016-4607, CVE-2016-4608, CVE-2016-4609, and CVE-2016-4612.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html; http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html
CVE: CVE-2016-4612
Published: 2016-07-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2016-1683.  Reason: This candidate is a reservation duplicate of CVE-2016-1683.  Notes: All CVE users should reference CVE-2016-1683 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2016-4614
Published: 2016-07-22
Description: libxml2 in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2016-4615, CVE-2016-4616, and CVE-2016-4619.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html; http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html
CVE: CVE-2016-4615
Published: 2016-07-22
Description: libxml2 in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2016-4614, CVE-2016-4616, and CVE-2016-4619.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html; http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html
CVE: CVE-2016-4616
Published: 2016-07-22
Description: libxml2 in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2016-4614, CVE-2016-4615, and CVE-2016-4619.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html; http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html
CVE: CVE-2016-4619
Published: 2016-07-22
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2015-8317.  Reason: This candidate is a reservation duplicate of CVE-2015-8317.  Notes: All CVE users should reference CVE-2015-8317 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2016-4621
Published: 2016-07-22
Description: libc++abi in Apple OS X before 10.11.6 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html; http://www.securityfocus.com/bid/91824; http://www.securitytracker.com/id/1036348
CVE: CVE-2016-4622
Published: 2016-07-22
Description: WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-4589, CVE-2016-4623, and CVE-2016-4624.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html; http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html; http://lists.apple.com/archives/security-announce/2016/Jul/msg00004.html
CVE: CVE-2016-4623
Published: 2016-07-22
Description: WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-4589, CVE-2016-4622, and CVE-2016-4624.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html; http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html; http://lists.apple.com/archives/security-announce/2016/Jul/msg00004.html
CVE: CVE-2016-4624
Published: 2016-07-22
Description: WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-4589, CVE-2016-4622, and CVE-2016-4623.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html; http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html; http://lists.apple.com/archives/security-announce/2016/Jul/msg00004.html
CVE: CVE-2016-4625
Published: 2016-07-22
Description: Use-after-free vulnerability in IOSurface in Apple OS X before 10.11.6 allows local users to gain privileges via unspecified vectors.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html; http://www.securityfocus.com/bid/91824; http://www.securitytracker.com/id/1036348
CVE: CVE-2016-4626
Published: 2016-07-22
Description: IOHIDFamily in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows local users to gain privileges or cause a denial of service (NULL pointer dereference) via unspecified vectors.
CVSS Score: 7.8 (HIGH)
CWE: CWE-476
References: http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html; http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html
CVE: CVE-2016-4627
Published: 2016-07-22
Description: IOAcceleratorFamily in Apple iOS before 9.3.3, tvOS before 9.2.2, and watchOS before 2.2.2 allows local users to gain privileges or cause a denial of service (NULL pointer dereference) via unspecified vectors.
CVSS Score: 7.8 (HIGH)
CWE: CWE-476
References: http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html; http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html; http://lists.apple.com/archives/security-announce/2016/Jul/msg00003.html
CVE: CVE-2016-4628
Published: 2016-07-22
Description: IOAcceleratorFamily in Apple iOS before 9.3.3 and watchOS before 2.2.2 allows local users to obtain sensitive information from kernel memory or cause a denial of service (out-of-bounds read) via unspecified vectors.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-200
References: http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html; http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html; http://www.securityfocus.com/bid/91832
CVE: CVE-2016-4629
Published: 2016-07-22
Description: ImageIO in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted xStride and yStride values in an EXR image.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html; http://www.securityfocus.com/bid/91824; http://www.securitytracker.com/id/1036348
CVE: CVE-2016-4630
Published: 2016-07-22
Description: ImageIO in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted EXR image with B44 compression.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html; http://www.securityfocus.com/bid/91824; http://www.securitytracker.com/id/1036348
CVE: CVE-2016-4631
Published: 2016-07-22
Description: ImageIO in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted TIFF file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html; http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html
CVE: CVE-2016-4632
Published: 2016-07-22
Description: ImageIO in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html; http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html
CVE: CVE-2016-4633
Published: 2016-07-22
Description: Intel Graphics Driver in Apple OS X before 10.11.6 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html; http://www.securityfocus.com/bid/91824; http://www.securitytracker.com/id/1036348
CVE: CVE-2016-4634
Published: 2016-07-22
Description: The Graphics Drivers subsystem in Apple OS X before 10.11.6 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html; http://www.securityfocus.com/bid/91824; http://www.securitytracker.com/id/1036348
CVE: CVE-2016-4635
Published: 2016-07-22
Description: FaceTime in Apple iOS before 9.3.3 and OS X before 10.11.6 allows man-in-the-middle attackers to spoof relayed-call termination, and obtain sensitive audio information in opportunistic circumstances, via unspecified vectors.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html; http://www.securityfocus.com/bid/91829
CVE: CVE-2016-4637
Published: 2016-07-22
Description: CoreGraphics in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted BMP image.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html; http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html
CVE: CVE-2016-4638
Published: 2016-07-22
Description: Login Window in Apple OS X before 10.11.6 allows attackers to gain privileges via a crafted app that leverages a "type confusion."
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html; http://www.securityfocus.com/bid/91824; http://www.securitytracker.com/id/1036348
CVE: CVE-2016-4639
Published: 2016-07-22
Description: Login Window in Apple OS X before 10.11.6 does not properly initialize memory, which allows local users to cause a denial of service via unspecified vectors.
CVSS Score: 7.0 (HIGH)
References: http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html; http://www.securityfocus.com/bid/91824; http://www.securitytracker.com/id/1036348
CVE: CVE-2016-4640
Published: 2016-07-22
Description: Login Window in Apple OS X before 10.11.6 allows attackers to execute arbitrary code in a privileged context, obtain sensitive user information, or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html; http://www.securityfocus.com/bid/91824; http://www.securitytracker.com/id/1036348