Memory Corruption Vulnerability in Kernel (CVE-2016-1721)
Publish date: 22 de enero de 2016
Gravedad: Crítico
Identificadores de CVE : CVE-2016-1721
Fecha recomendada: 19 de enero de 2016
Descripción
Trend Micro researchers discovered this vulnerability which is rated by Apple as ‘Critical.’ It affects OS X below 10.11.3 and iOS below 9.2.1. Once successfully exploited, an attacker can execute arbitrary codes with Kernel privileges. In addition, once attackers bypass KASLR using vulnerability, they can root the affected system and/or device when a user installs and runs a malicious app.
We advise users to update their systems and devices to the latest OS X and iOS versions.