CVE-2016-4625
HighSummary
Use-after-free vulnerability in IOSurface in Apple OS X before 10.11.6 allows local users to gain privileges via unspecified vectors.
Risk Assessment
The organization may be exposed to unauthorized access by local users, potentially leading to privilege escalation.
Recommendation
It is recommended to update the system to version 10.11.6 or later to mitigate this vulnerability.
Other vulnerabilities in IOSurface
See all- CVE-2017-13861High
An issue was discovered in certain Apple products, including iOS before 11.2, tvOS before 11.2, and watchOS before 4.2, involving the 'IOSurface' component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
- CVE-2017-6979High
An issue was discovered in certain Apple products, including iOS, macOS, tvOS, and watchOS, related to the 'IOSurface' component. A race condition allows attackers to execute arbitrary code in a privileged context via a crafted app.
- CVE-2015-1061High
IOSurface in Apple iOS before 8.2, Apple OS X through 10.10.2, and Apple TV before 7.1 allows attackers to execute arbitrary code in a privileged context via a crafted app that leverages 'type confusion' during serialized-object handling.
Original NVD description (English source)
Use-after-free vulnerability in IOSurface in Apple OS X before 10.11.6 allows local users to gain privileges via unspecified vectors.