Apple macOS APPLE-SA-2017-05-15-1 Multiple Security Vulnerabilities

Bugtraq ID:	98483
Class:	Input Validation Error
CVE:	CVE-2017-6988 CVE-2017-6978 CVE-2017-2527 CVE-2017-2533 CVE-2017-6990 CVE-2017-6986 CVE-2017-2503 CVE-2017-2545 CVE-2017-2494 CVE-2017-2509 CVE-2017-2516 CVE-2017-2546 CVE-2017-2542 CVE-2017-2543 CVE-2017-6985 CVE-2017-2512 CVE-2017-2535 CVE-2017-2534 CVE-2017-6977 CVE-2017-2537 CVE-2017-2541 CVE-2017-2548 CVE-2017-2540
Remote:	Yes
Local:	No
Published:	May 15 2017 12:00AM
Updated:	May 15 2017 12:00AM
Credit:	Tim Cappalli of Aruba, Ian Beer of Google Project Zero, Samuel Gro�? and Niklas Baumstark, Chaitin Security Research Lab, evi1m0 of YSRC, sss and Axis of 360Nirvan team, 360 Security, Jann Horn, Federico Bento of Faculty of Sciences, Richard Zhu, and Team
Vulnerable:	Apple macOS 10.12.4 Apple macOS 10.12.3 Apple macOS 10.12.2 Apple macOS 10.12.1 Apple macOS 10.12 Apple Mac Os X 10.11.6 Apple Mac Os X 10.10.5
Not Vulnerable:	Apple macOS 10.12.5

Apple macOS APPLE-SA-2017-05-15-1 Multiple Security Vulnerabilities

Apple macOS is prone to multiple security vulnerabilities.

An attacker can exploit these issues to gain elevated privileges, perform unauthorized actions and execute arbitrary code with kernel privileges. Failed exploit attempts will likely cause a denial-of-service condition.

Apple macOS APPLE-SA-2017-05-15-1 Multiple Security Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Apple macOS APPLE-SA-2017-05-15-1 Multiple Security Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Apple macOS APPLE-SA-2017-05-15-1 Multiple Security Vulnerabilities

References:

• Apple Home Page (Apple)