VDB

CVE-2016-7742

CVE-2016-7742 PUBLISHED CVSS 7.800000190734863 HIGH

An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the "xar" component, which allows remote attackers to execute arbitrary code via a crafted archive that triggers use of uninitialized memory locations.

EPSS 1.33% · 70.0th percentile

Risk Scores

CVSS 3.0
7.800000190734863
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
1.33%
70.0th percentile

Affected Products

VendorProductVersions
n/an/an/a
applemac_os_x0

Timeline

  • Feb 20, 2017 CVE Published
  • Feb 4, 2022 EPSS Score
  • Mar 29, 2022 EPSS Score
  • Jul 13, 2022 EPSS Score
  • Sep 6, 2022 EPSS Score
  • Oct 29, 2022 EPSS Score
  • Feb 12, 2023 EPSS Score
  • Mar 7, 2023 EPSS Score
  • Apr 6, 2023 EPSS Score
  • Jul 21, 2023 EPSS Score
  • Sep 13, 2023 EPSS Score
  • Nov 5, 2023 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›