CVE-2016-1806 describes a vulnerability in Apple OS X before version 10.11.5, where the Crash Reporter component could be exploited by a crafted application to execute arbitrary code with elevated privileges. This high-severity vulnerability (CVSS 7.8) requires user interaction (UI:R) and local access (AV:L), but could lead to complete compromise of confidentiality, integrity, and availability (C:H/I:H/A:H). While there are no known public exploits in Metasploit, Nuclei, or ExploitDB, and it is not listed in CISA's KEV catalog, the vulnerability did garner some community discussion and media coverage at the time of its disclosure.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 10.11.4CPE matchmatch criteria | cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.