Liang Chen

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 10.12 **Description** The issue involves the `Intel Graphics Driver` component and is related to insufficient access restrictions to certain functions. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. The vulnerability can be exploited by a remote attacker to achieve privilege escalation or cause a service disruption. **Recommendations** For macOS versions prior to 10.12, update to version 10.12 or later to resolve the issue. As a temporary workaround, consider restricting access to the `Intel Graphics Driver` component to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Apple OS X versions prior to 10.11.5 **Description** The issue is related to a buffer overflow in the Multi-Touch subsystem of the operating system, which can be exploited by a remote attacker to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) using a specially crafted application. **Recommendations** For Apple OS X versions prior to 10.11.5, update to version 10.11.5 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Apple OS X versions prior to 10.11.5 **Description** The issue is related to a buffer overflow in the IOAcceleratorFamily component, which can be exploited by attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. This can be achieved by a remote attacker using a specially crafted application. **Recommendations** For Apple OS X versions prior to 10.11.5, update to version 10.11.5 or later to resolve the issue. As a temporary workaround, consider restricting the use of the IOAcceleratorFamily component to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Apple iOS versions prior to 9.3.2 Safari versions prior to 9.1.1 tvOS versions prior to 9.2.1 **Description** The issue is related to the WebKit Canvas implementation, which allows remote attackers to execute arbitrary code or cause a denial of service due to memory corruption. This can be achieved via a crafted web site. The vulnerability is caused by a buffer overflow in the WebKit Canvas component. **Recommendations** For Apple iOS versions prior to 9.3.2, update to version 9.3.2 or later. For Safari versions prior to 9.1.1, update to version 9.1.1 or later. For tvOS versions prior to 9.2.1, update to version 9.2.1 or later.

**Name of the Vulnerable Software and Affected Versions** Apple Safari (affected versions not specified) iOS (affected versions not specified) **Description** The issue is caused by a buffer overflow in the WebKit component. It may allow a remote attacker to execute arbitrary code or cause a denial of service (memory corruption) by using a specially crafted website. The vulnerability can be exploited through a remote code execution in Apple Safari, related to a use-after-free issue in the ArrayStorage DFG Optimization. **Recommendations** For Apple Safari, consider restricting access to potentially vulnerable websites until a patch is available. For iOS, as a temporary workaround, consider disabling the WebKit-related functionality until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Apple OS X versions prior to 10.11.3 **Description** The issue is caused by a buffer overflow in the AppleGraphicsPowerManagement component of the Mac OS X operating system. This can be exploited by a local attacker to gain elevated privileges or cause a denial of service, resulting in memory corruption. **Recommendations** For versions prior to 10.11.3, update to version 10.11.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the AppleGraphicsPowerManagement component to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Microsoft Internet Explorer versions 7 through 11 **Description** The issue allows remote attackers to gain privileges via a crafted web site. Multiple elevation of privilege vulnerabilities exist in Internet Explorer, which could be used in conjunction with another vulnerability to elevate privileges and potentially execute arbitrary code. These vulnerabilities by themselves do not allow arbitrary code to be run, but they can be used to exploit other vulnerabilities with elevated privileges. **Recommendations** For Microsoft Internet Explorer versions 7 through 11, at the moment, there is no information about a newer version that contains a fix for this vulnerability.