Most recent entries from all

bdu:2017-00513

cnvd-2016-11589

fkie_cve-2016-7582

GHSA-2x7j-fr5f-qv8j

gsd-2016-7582

VAR-201702-0463

An issue was discovered in certain Apple products. macOS before 10.12 is affected. The issue involves the "Intel Graphics Driver" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.The specific flaw exists within the IntelHD5000 kext. The issue lies in the failure to properly validate the existence of an object prior to performing operations on it. An attacker can leverage this vulnerability to escalate privileges under the context of the kernel. Apple macOS is prone to an arbitrary code-execution vulnerability. Failed exploit attempts will likely result in denial-of-service conditions. Versions prior to macOS 10.12 are vulnerable. Apple macOS Sierra is a dedicated operating system developed by Apple for Mac computers