CVE-2016-4638 describes a privilege escalation vulnerability in the Login Window of Apple OS X before version 10.11.6, allowing attackers to gain elevated privileges through a crafted application exploiting a "type confusion" flaw. With a CVSS score of 7.8 (HIGH), this vulnerability has a local attack vector and low attack complexity, potentially leading to high impacts on confidentiality, integrity, and availability. While no public exploit code or active exploitation has been observed, and community discussion is minimal, the vulnerability's high severity warrants attention.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 10.11.5CPE matchmatch criteria | cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.