CVE-2016-4780

CVE-2016-4780 describes a vulnerability in the Thunderbolt component of macOS versions prior to 10.12.1. This flaw allows an attacker, through a crafted application, to execute arbitrary code with elevated privileges or trigger a denial-of-service condition via a NULL pointer dereference. Rated with a CVSS score of 7.8 (High), it requires user interaction (UI:R) and local access (AV:L) for exploitation, leading to high impacts on confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.