CVE-2016-4640
HighSummary
The Login Window in Apple OS X before version 10.11.6 allows attackers to execute arbitrary code in a privileged context, obtain sensitive user information, or cause a denial of service (memory corruption) via a crafted app.
Risk Assessment
This vulnerability could lead to serious security breaches, including theft of user data and system instability.
Recommendation
It is recommended to update the system to the latest version to mitigate this vulnerability and to monitor applications running in a privileged context.
Other vulnerabilities in Apple OS X
See all- CVE-2016-4647High
Audio in Apple OS X before 10.11.6 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted file.
- CVE-2016-4641High
The Login Window in Apple OS X before version 10.11.6 allows attackers to execute arbitrary code in a privileged context or obtain sensitive user information via a crafted app that leverages a 'type confusion.'
- CVE-2016-4639High
The Login Window in Apple OS X before 10.11.6 does not properly initialize memory, allowing local users to cause a denial of service via unspecified vectors.
- CVE-2016-4638High
The Login Window in Apple OS X before version 10.11.6 allows attackers to gain privileges via a crafted app that leverages a 'type confusion.'
- CVE-2015-7052High
Kext tools in Apple OS X before 10.11.2 mishandle kernel-extension loading, allowing local users to gain privileges via unspecified vectors.
- CVE-2015-7044High
The System Integrity Protection feature in Apple OS X before 10.11.2 mishandles union mounts, allowing attackers to execute arbitrary code in a privileged context via a crafted app with root privileges.
- CVE-2015-5945High
The Sandbox subsystem in Apple OS X before 10.11.1 allows local users to gain privileges via vectors involving NVRAM parameters.
- CVE-2015-3775High
Apple OS X before 10.10.5 does not properly implement authentication, allowing local users to obtain admin privileges via unspecified vectors.
- CVE-2015-3767High
A vulnerability in Apple OS X before version 10.10.5 allows local users to gain privileges or cause a denial of service through a malformed DMG image.
- CVE-2014-8828High
A vulnerability in Apple OS X before version 10.10 allows attackers to write to the sandbox-profile cache via a sandboxed app that includes a com.apple.sandbox segment in a path.
Original NVD description (English source)
Login Window in Apple OS X before 10.11.6 allows attackers to execute arbitrary code in a privileged context, obtain sensitive user information, or cause a denial of service (memory corruption) via a crafted app.