CVE-2016-1757
30Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 13%
from disclosure to weapon0 days
Published on NVDMar 24
1st PoCMar 23
exploitation probability
13%top 4% of all CVEs
observed exploitation
nono source reports it
5 public exploit(s)
Race condition in the kernel in Apple iOS before 9.3 and OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context via a crafted app.
Affected products
n/a · n/apublic PoCs found — 5
githubgithub.com/gdbinit/mach_race★ 85cve_referencewww.exploit-db.com/exploits/39595/unverifiedcve_referencewww.exploit-db.com/exploits/39741/unverifiedexploitdbwww.exploit-db.com/exploits/39595unverifiedexploitdbwww.exploit-db.com/exploits/39741unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.htmlhttp://lists.apple.com/archives/security-announce/2016/Mar/msg00004.htmlhttps://bugs.chromium.org/p/project-zero/issues/detail?id=676https://support.apple.com/HT206166https://support.apple.com/HT206167https://www.exploit-db.com/exploits/39595/https://www.exploit-db.com/exploits/39741/http://www.securitytracker.com/id/1035353