CVE-2016-1759
HighSummary
The kernel in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
Risk Assessment
This vulnerability may lead to unauthorized access to the system and destabilization of its operation, posing a serious security threat to the organization.
Recommendation
It is recommended to update the operating system to version 10.11.4 or later to mitigate the risks associated with this vulnerability.
Other vulnerabilities in Jądro systemu Apple OS X
See all- CVE-2015-5932High
The kernel in Apple OS X before 10.11.1 allows local users to gain privileges by leveraging an unspecified 'type confusion' during Mach task processing.
- CVE-2015-3761High
The kernel in Apple OS X before 10.10.5 does not properly validate pathnames in the environment, allowing local users to gain privileges via unspecified vectors.
- CVE-2014-8825High
The kernel in Apple OS X before 10.10.2 does not properly perform identitysvc validation of certain directory-service functionality, allowing local users to gain privileges or spoof directory-service responses.
- CVE-2014-8824High
The kernel in Apple OS X before 10.10.2 does not properly validate IODataQueue object metadata fields, allowing attackers to execute arbitrary code in a privileged context.
Original NVD description (English source)
The kernel in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.