Apple Mac OS vulnerabilities

3 CVEs affecting Apple Mac OS, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-4644, published 2019-01-11.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-4642, published 2019-01-11. Medium severity, CVSS 5.9. EPSS: 1.3% chance of exploitation in the next 30 days. In iOS before 9.3.3, tvOS before 9.2.2, and OS X El Capitan before v10.11.6 and Security Update 2016-004, proxy authentication incorrectly reported HTTP proxies received credentials securely. This…
CVE-2016-4644, published 2019-01-11. Medium severity, CVSS 6.5. EPSS: 1.3% chance of exploitation in the next 30 days. In iOS before 9.3.3, tvOS before 9.2.2, and OS X El Capitan before v10.11.6 and Security Update 2016-004, a downgrade issue existed with HTTP authentication credentials saved in Keychain. This issue…
CVE-2016-4643, published 2019-01-11. Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days. In iOS before 9.3.3, tvOS before 9.2.2, and OS X El Capitan before v10.11.6 and Security Update 2016-004, a validation issue existed in the parsing of 407 responses. This issue was addressed through…