DeutschShown in its original language — a full translation is planned for a future version.
Apple Mac OS: Mehrere Schwachstellen
view advisory published 2017-09-25
Ein entfernter, anonymer Angreifer kann mehrere Schwachstelle in Apple Mac OS ausnutzen, um Code mit Kernel Privilegien auszuführen, Sicherheitsvorkehrungen zu umgehen, einen Denial of Service Angriff durchzuführen oder vertrauliche Daten einzusehen.
01
describes (199)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2016-9063US | critical9.8 | — | ||
An integer overflow during the parsing of XML using the Expat library. This vulnerability affects Firefox < 50. | ||||
| CVE-2016-9042US | medium5.9 | — | ||
An exploitable denial of service vulnerability exists in the origin timestamp check functionality of ntpd 4.2.8p9. A specially crafted unauthenticated network packet can be used to… | ||||
| CVE-2017-10140US | high7.8 | — | ||
Postfix before 2.11.10, 3.0.x before 3.0.10, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 might allow local users to gain privileges by leveraging undocumented functionality in Berke… | ||||
| CVE-2017-13854US | high7.8 | — | ||
An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is affected. tvOS before 11 is affected. watchOS before 4 is affected. The issue in… | ||||
| CVE-2017-13851US | medium5.5 | — | ||
An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "DesktopServices" component. It allows local users to bypass intended acce… | ||||
| CVE-2017-13839US | medium5.5 | — | ||
An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "Spotlight" component. It allows local users to see results for other user… | ||||
| CVE-2017-13837US | high7.5OT elevated | — | ||
An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "Installer" component. It does not properly restrict an app's entitlements… | ||||
| CVE-2017-13827US | high7.8 | — | ||
An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "kext tools" component. It allows attackers to execute arbitrary code in a… | ||||
| CVE-2017-7132US | high7.8 | — | ||
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Quick Look" component. It allows remote attackers to execute arbitrary… | ||||
| CVE-2017-13846US | critical9.8 | — | ||
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the third-party "PCRE" product. Versions before 8.40 allow remote attackers… | ||||
| CVE-2017-13843US | high7.8 | — | ||
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a p… | ||||
| CVE-2017-13842US | medium5.5 | — | ||
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read r… | ||||
| CVE-2017-13841US | medium5.5 | — | ||
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read r… | ||||
| CVE-2017-13840US | medium5.5 | — | ||
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read r… | ||||
| CVE-2017-13838US | high7.8 | — | ||
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Sandbox" component. It allows attackers to execute arbitrary code in a… | ||||
| CVE-2017-13836US | medium5.5 | — | ||
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read r… | ||||
| CVE-2017-13834US | high7.8 | — | ||
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" component. It allows remote attackers to cause a denial of serv… | ||||
| CVE-2017-13833US | high7.8 | — | ||
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "CFNetwork" component. It allows attackers to execute arbitrary code in… | ||||
| CVE-2017-13832US | critical9.8 | — | ||
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "802.1X" component. It allows attackers to have an unspecified impact by… | ||||
| CVE-2017-13831US | high7.1 | — | ||
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "ImageIO" component. It allows remote attackers to obtain sensitive info… | ||||
showing 20 of 199
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan