9.3
CVSSv2

CVE-2016-1861

Published: 19/06/2016 Updated: 30/11/2016
CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6
CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8
VMScore: 935
Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Summary

The NVIDIA Graphics Drivers subsystem in Apple OS X prior to 10.11.5 allows malicious users to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1846.

Vulnerable Product Search on Vulmon Subscribe to Product

apple mac os x

Exploits

/* Source: bugschromiumorg/p/project-zero/issues/detail?id=724 nvAPIClient::Escape is the sole external method of nvAcclerator userclient type 0x2a0 It implements its own method and parameter demuxing using the struct-in struct-out buffers The second dword in the struct in buffer is another method identifier used in a switch statement ...