CVE-2006-4396: Apple Mac OS X

Medium severity, CVSS 4.6. EPSS: 0.9% chance of exploitation in the next 30 days.

The Apple Type Services (ATS) server in Mac OS X 10.4.8 and earlier does not securely create log files, which allows local users to create and modify arbitrary files via unspecified vectors, possibly relating to a symlink attack.

Affected products

• Apple Mac OS X: up to and including 10.4.8

Published 2006-11-30. Last modified 2026-06-16.