deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-1799
Published: 2016-05-20
Description: Audio in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/May/msg00004.html; http://www.securityfocus.com/bid/90696; http://www.securitytracker.com/id/1035895
CVE: CVE-2016-1800
Published: 2016-05-20
Description: Captive Network Assistant in Apple OS X before 10.11.5 mishandles a custom URL scheme, which allows user-assisted remote attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: http://lists.apple.com/archives/security-announce/2016/May/msg00004.html; http://www.securityfocus.com/bid/90696; http://www.securitytracker.com/id/1035895
CVE: CVE-2016-1801
Published: 2016-05-20
Description: The CFNetwork Proxies subsystem in Apple iOS before 9.3.2, OS X before 10.11.5, and tvOS before 9.2.1 mishandles URLs in http and https requests, which allows remote attackers to obtain sensitive information via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://lists.apple.com/archives/security-announce/2016/May/msg00001.html; http://lists.apple.com/archives/security-announce/2016/May/msg00002.html; http://lists.apple.com/archives/security-announce/2016/May/msg00004.html
CVE: CVE-2016-1802
Published: 2016-05-20
Description: CCCrypt in CommonCrypto in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 mishandles return values during key-length calculations, which allows attackers to obtain sensitive information via a crafted app.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://lists.apple.com/archives/security-announce/2016/May/msg00001.html; http://lists.apple.com/archives/security-announce/2016/May/msg00002.html; http://lists.apple.com/archives/security-announce/2016/May/msg00003.html
CVE: CVE-2016-1803
Published: 2016-05-20
Description: CoreCapture in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-476
References: http://lists.apple.com/archives/security-announce/2016/May/msg00001.html; http://lists.apple.com/archives/security-announce/2016/May/msg00002.html; http://lists.apple.com/archives/security-announce/2016/May/msg00003.html
CVE: CVE-2016-1804
Published: 2016-05-20
Description: The Multi-Touch subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/May/msg00004.html; http://www.securityfocus.com/bid/90696; http://www.securitytracker.com/id/1035895
CVE: CVE-2016-1805
Published: 2016-05-20
Description: CoreStorage in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-284
References: http://lists.apple.com/archives/security-announce/2016/May/msg00004.html; http://www.securityfocus.com/bid/90696; http://www.securitytracker.com/id/1035895
CVE: CVE-2016-1806
Published: 2016-05-20
Description: Crash Reporter in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-284
References: http://lists.apple.com/archives/security-announce/2016/May/msg00004.html; http://www.securityfocus.com/bid/90696; http://www.securitytracker.com/id/1035895
CVE: CVE-2016-1807
Published: 2016-05-20
Description: Race condition in the Disk Images subsystem in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows local users to obtain sensitive information from kernel memory via unspecified vectors.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-362
References: http://lists.apple.com/archives/security-announce/2016/May/msg00001.html; http://lists.apple.com/archives/security-announce/2016/May/msg00002.html; http://lists.apple.com/archives/security-announce/2016/May/msg00003.html
CVE: CVE-2016-1808
Published: 2016-05-20
Description: The Disk Images subsystem in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/May/msg00001.html; http://lists.apple.com/archives/security-announce/2016/May/msg00002.html; http://lists.apple.com/archives/security-announce/2016/May/msg00003.html
CVE: CVE-2016-1809
Published: 2016-05-20
Description: Disk Utility in Apple OS X before 10.11.5 uses incorrect encryption keys for disk images, which has unspecified impact and attack vectors.
CVSS Score: 7.5 (HIGH)
References: http://lists.apple.com/archives/security-announce/2016/May/msg00004.html; http://www.securitytracker.com/id/1035895; https://support.apple.com/HT206567
CVE: CVE-2016-1810
Published: 2016-05-20
Description: The Graphics Drivers subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/May/msg00004.html; http://www.securityfocus.com/bid/90696; http://www.securitytracker.com/id/1035895
CVE: CVE-2016-1811
Published: 2016-05-20
Description: ImageIO in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted image.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: http://lists.apple.com/archives/security-announce/2016/May/msg00001.html; http://lists.apple.com/archives/security-announce/2016/May/msg00002.html; http://lists.apple.com/archives/security-announce/2016/May/msg00003.html
CVE: CVE-2016-1812
Published: 2016-05-20
Description: Buffer overflow in Intel Graphics Driver in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/May/msg00004.html; http://www.securityfocus.com/bid/90696; http://www.securitytracker.com/id/1035895
CVE: CVE-2016-1813
Published: 2016-05-20
Description: The IOAccelSharedUserClient2::page_off_resource method in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-476
References: http://lists.apple.com/archives/security-announce/2016/May/msg00001.html; http://lists.apple.com/archives/security-announce/2016/May/msg00002.html; http://lists.apple.com/archives/security-announce/2016/May/msg00003.html
CVE: CVE-2016-1814
Published: 2016-05-20
Description: IOAcceleratorFamily in Apple iOS before 9.3.2, OS X before 10.11.5, and tvOS before 9.2.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted app.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://lists.apple.com/archives/security-announce/2016/May/msg00001.html; http://lists.apple.com/archives/security-announce/2016/May/msg00002.html; http://lists.apple.com/archives/security-announce/2016/May/msg00004.html
CVE: CVE-2016-1815
Published: 2016-05-20
Description: IOAcceleratorFamily in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/May/msg00004.html; http://www.securityfocus.com/bid/90696; http://www.securitytracker.com/id/1035895
CVE: CVE-2016-1816
Published: 2016-05-20
Description: IOAcceleratorFamily in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference) via a crafted app.
CVSS Score: 7.8 (HIGH)
References: http://lists.apple.com/archives/security-announce/2016/May/msg00004.html; http://www.securityfocus.com/bid/90696; http://www.securitytracker.com/id/1035895
CVE: CVE-2016-1817
Published: 2016-05-20
Description: IOAcceleratorFamily in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1818 and CVE-2016-1819.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/May/msg00001.html; http://lists.apple.com/archives/security-announce/2016/May/msg00002.html; http://lists.apple.com/archives/security-announce/2016/May/msg00003.html
CVE: CVE-2016-1818
Published: 2016-05-20
Description: IOAcceleratorFamily in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1817 and CVE-2016-1819.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/May/msg00001.html; http://lists.apple.com/archives/security-announce/2016/May/msg00002.html; http://lists.apple.com/archives/security-announce/2016/May/msg00003.html
CVE: CVE-2016-1819
Published: 2016-05-20
Description: Use-after-free vulnerability in the IOAccelContext2::clientMemoryForType method in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1817 and CVE-2016-1818.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: http://lists.apple.com/archives/security-announce/2016/May/msg00001.html; http://lists.apple.com/archives/security-announce/2016/May/msg00002.html; http://lists.apple.com/archives/security-announce/2016/May/msg00003.html
CVE: CVE-2016-1820
Published: 2016-05-20
Description: Buffer overflow in IOAudioFamily in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/May/msg00004.html; http://www.securityfocus.com/bid/90696; http://www.securitytracker.com/id/1035895
CVE: CVE-2016-1821
Published: 2016-05-20
Description: IOAudioFamily in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference) via a crafted app.
CVSS Score: 7.8 (HIGH)
References: http://lists.apple.com/archives/security-announce/2016/May/msg00004.html; http://www.securityfocus.com/bid/90696; http://www.securitytracker.com/id/1035895
CVE: CVE-2016-1822
Published: 2016-05-20
Description: IOFireWireFamily in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/May/msg00004.html; http://www.securityfocus.com/bid/90696; http://www.securitytracker.com/id/1035895
CVE: CVE-2016-1823
Published: 2016-05-20
Description: The IOHIDDevice::handleReportWithTime function in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (out-of-bounds read and memory corruption) via a crafted IOHIDReportType enum, which triggers an incorrect cast, a different vulnerability than CVE-2016-1824.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: http://lists.apple.com/archives/security-announce/2016/May/msg00001.html; http://lists.apple.com/archives/security-announce/2016/May/msg00002.html; http://lists.apple.com/archives/security-announce/2016/May/msg00003.html
CVE: CVE-2016-1824
Published: 2016-05-20
Description: IOHIDFamily in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1823.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/May/msg00001.html; http://lists.apple.com/archives/security-announce/2016/May/msg00002.html; http://lists.apple.com/archives/security-announce/2016/May/msg00003.html
CVE: CVE-2016-1825
Published: 2016-05-20
Description: IOHIDFamily in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/May/msg00004.html; http://www.securityfocus.com/bid/90696; http://www.securitytracker.com/id/1035895
CVE: CVE-2016-1826
Published: 2016-05-20
Description: Integer overflow in the dtrace implementation in the kernel in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context via a crafted app.
CVSS Score: 7.8 (HIGH)
References: http://lists.apple.com/archives/security-announce/2016/May/msg00004.html; http://www.securityfocus.com/bid/90696; http://www.securitytracker.com/id/1035895
CVE: CVE-2016-1827
Published: 2016-05-20
Description: The kernel in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1828, CVE-2016-1829, and CVE-2016-1830.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/May/msg00001.html; http://lists.apple.com/archives/security-announce/2016/May/msg00002.html; http://lists.apple.com/archives/security-announce/2016/May/msg00003.html
CVE: CVE-2016-1828
Published: 2016-05-20
Description: The kernel in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1827, CVE-2016-1829, and CVE-2016-1830.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/May/msg00001.html; http://lists.apple.com/archives/security-announce/2016/May/msg00002.html; http://lists.apple.com/archives/security-announce/2016/May/msg00003.html
CVE: CVE-2016-1829
Published: 2016-05-20
Description: The kernel in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1827, CVE-2016-1828, and CVE-2016-1830.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/May/msg00001.html; http://lists.apple.com/archives/security-announce/2016/May/msg00002.html; http://lists.apple.com/archives/security-announce/2016/May/msg00003.html
CVE: CVE-2016-1830
Published: 2016-05-20
Description: The kernel in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1827, CVE-2016-1828, and CVE-2016-1829.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/May/msg00001.html; http://lists.apple.com/archives/security-announce/2016/May/msg00002.html; http://lists.apple.com/archives/security-announce/2016/May/msg00003.html
CVE: CVE-2016-1831
Published: 2016-05-20
Description: The kernel in Apple iOS before 9.3.2 and OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/May/msg00002.html; http://lists.apple.com/archives/security-announce/2016/May/msg00004.html; http://www.securityfocus.com/bid/90696
CVE: CVE-2016-1832
Published: 2016-05-20
Description: libc in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/May/msg00001.html; http://lists.apple.com/archives/security-announce/2016/May/msg00002.html; http://lists.apple.com/archives/security-announce/2016/May/msg00003.html
CVE: CVE-2016-1833
Published: 2016-05-20
Description: The htmlCurrentChar function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://lists.apple.com/archives/security-announce/2016/May/msg00001.html; http://lists.apple.com/archives/security-announce/2016/May/msg00002.html; http://lists.apple.com/archives/security-announce/2016/May/msg00003.html
CVE: CVE-2016-1834
Published: 2016-05-20
Description: Heap-based buffer overflow in the xmlStrncat function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XML document.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-122
References: http://lists.apple.com/archives/security-announce/2016/May/msg00001.html; http://lists.apple.com/archives/security-announce/2016/May/msg00002.html; http://lists.apple.com/archives/security-announce/2016/May/msg00003.html
CVE: CVE-2016-1835
Published: 2016-05-20
Description: Use-after-free vulnerability in the xmlSAX2AttributeNs function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2 and OS X before 10.11.5, allows remote attackers to cause a denial of service via a crafted XML document.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/May/msg00002.html; http://lists.apple.com/archives/security-announce/2016/May/msg00004.html; http://rhn.redhat.com/errata/RHSA-2016-2957.html
CVE: CVE-2016-1836
Published: 2016-05-20
Description: Use-after-free vulnerability in the xmlDictComputeFastKey function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service via a crafted XML document.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416
References: http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2016/Jul/msg00001.html; http://lists.apple.com/archives/security-announce/2016/Jul/msg00002.html
CVE: CVE-2016-1837
Published: 2016-05-20
Description: Multiple use-after-free vulnerabilities in the (1) htmlPArsePubidLiteral and (2) htmlParseSystemiteral functions in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allow remote attackers to cause a denial of service via a crafted XML document.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416
References: http://lists.apple.com/archives/security-announce/2016/May/msg00001.html; http://lists.apple.com/archives/security-announce/2016/May/msg00002.html; http://lists.apple.com/archives/security-announce/2016/May/msg00003.html
CVE: CVE-2016-1838
Published: 2016-05-20
Description: The xmlPArserPrintFileContextInternal function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://lists.apple.com/archives/security-announce/2016/May/msg00001.html; http://lists.apple.com/archives/security-announce/2016/May/msg00002.html; http://lists.apple.com/archives/security-announce/2016/May/msg00003.html
CVE: CVE-2016-1839
Published: 2016-05-20
Description: The xmlDictAddString function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://lists.apple.com/archives/security-announce/2016/May/msg00001.html; http://lists.apple.com/archives/security-announce/2016/May/msg00002.html; http://lists.apple.com/archives/security-announce/2016/May/msg00003.html
CVE: CVE-2016-1840
Published: 2016-05-20
Description: Heap-based buffer overflow in the xmlFAParsePosCharGroup function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XML document.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/May/msg00001.html; http://lists.apple.com/archives/security-announce/2016/May/msg00002.html; http://lists.apple.com/archives/security-announce/2016/May/msg00003.html
CVE: CVE-2016-1841
Published: 2016-05-20
Description: libxslt, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2016/May/msg00001.html; http://lists.apple.com/archives/security-announce/2016/May/msg00002.html; http://lists.apple.com/archives/security-announce/2016/May/msg00003.html
CVE: CVE-2016-1842
Published: 2016-05-20
Description: MapKit in Apple iOS before 9.3.2, OS X before 10.11.5, and watchOS before 2.2.1 does not use HTTPS for shared links, which allows remote attackers to obtain sensitive information by sniffing the network for HTTP traffic.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: http://lists.apple.com/archives/security-announce/2016/May/msg00002.html; http://lists.apple.com/archives/security-announce/2016/May/msg00003.html; http://lists.apple.com/archives/security-announce/2016/May/msg00004.html
CVE: CVE-2016-1843
Published: 2016-05-20
Description: The Messages component in Apple OS X before 10.11.5 mishandles filename encoding, which allows remote attackers to obtain sensitive information via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://lists.apple.com/archives/security-announce/2016/May/msg00004.html; http://www.securityfocus.com/bid/90696; http://www.securitytracker.com/id/1035895
CVE: CVE-2016-1844
Published: 2016-05-20
Description: The Messages component in Apple OS X before 10.11.5 mishandles roster changes, which allows remote attackers to modify contact lists via unspecified vectors.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-284
References: http://lists.apple.com/archives/security-announce/2016/May/msg00004.html; http://www.securityfocus.com/bid/90696; http://www.securitytracker.com/id/1035895