high7.8Public exploit code
CVE-2016-4625
Use-after-free vulnerability in IOSurface in Apple OS X before 10.11.6 allows local users to gain privileges via unspecified vectors.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Apple macOS 10.12 - 'task_t' Local Privilege Escalation2016-10-31 · local · macos · Verified
- Apple OS X/iOS Kernel - IOSurface Use-After-Free2016-10-31 · local · osx · Verified
Impact
Use-after-free vulnerability in IOSurface in Apple OS X before 10.11.6 allows local users to gain privileges via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Mac Os X | through 10.11.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html
- http://www.securityfocus.com/bid/91824
- http://www.securitytracker.com/id/1036348
- https://support.apple.com/HT206903
- https://www.exploit-db.com/exploits/40653/
- https://www.exploit-db.com/exploits/40669/
- http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html
- http://www.securityfocus.com/bid/91824
- http://www.securitytracker.com/id/1036348
- https://support.apple.com/HT206903
- https://www.exploit-db.com/exploits/40653/
- https://www.exploit-db.com/exploits/40669/