CVE-2016-7633 EXPLOIT
7.8
HIGH · CVSS 3.0 · EPSS 1.3% (pctl 69)
Patch early
A public exploit exists.
Description
An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the "Directory Services" component. It allows local users to gain privileges or cause a denial of service (use-after-free) via unspecified vectors.
Scoring
| CVSS | 7.8 (HIGH, v3.0) |
|---|---|
| Vector | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 1.28% — more likely to be exploited than 69% of all CVEs |
| Weakness | CWE-416 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2017-02-20 |
| Last modified | 2026-06-17 |
Affected (1)
| Vendor | Product |
|---|---|
| apple | mac os x |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Apple macOS 10.12 - Double vm_deallocate in Userspace MIG Code Use-After-Free | 2016-12-22 |
References
- http://www.securityfocus.com/bid/94903
- http://www.securitytracker.com/id/1037469
- https://support.apple.com/HT207423
- https://www.exploit-db.com/exploits/40954/
- http://www.securityfocus.com/bid/94903
- http://www.securitytracker.com/id/1037469
- https://support.apple.com/HT207423
- https://www.exploit-db.com/exploits/40954/
→ the Explorer · watch your stack · NVD