Impact: An application may be able to execute arbitrary code with kernel privilegesĭescription: A memory corruption issue was addressed with improved memory handling.Īvailable for: macOS Sierra 10.12.6, OS X El Capitan 10.11.6 This issue was addressed with improved bounds checking.Īvailable for: macOS High Sierra 10.13.2, macOS Sierra 10.12.6, OS X El Capitan 10.11.6ĭescription: Multiple buffer overflows in kernel in Intel Manageability Engine Firmware 11.0/11.5/11.6/11.7/11.10/11.20 allow attacker with local access to the system to execute arbitrary code.ĬVE-2017-5705: Mark Ermolov and Maxim Goryachy from Positive Technologiesĭescription: Multiple privilege escalations in kernel in Intel Manageability Engine Firmware 11.0/11.5/11.6/11.7/11.10/11.20 allow unauthorized process to access privileged content via unspecified vector.ĬVE-2017-5708: Mark Ermolov and Maxim Goryachy from Positive Technologies This issue was addressed with improved bounds checking.ĭescription: An out-of-bounds read issue existed in the curl. Impact: Processing a maliciously crafted audio file may lead to arbitrary code executionĭescription: A memory corruption issue was addressed with improved input validation.ĬVE-2018-4094: Mingi Cho, Seoyoung Kim, Young-Ho Lee, MinSik Shin and Taekyoung Kwon of the Information Security Lab, Yonsei Universityĭescription: An integer overflow existed in curl.

Available for: macOS High Sierra 10.13.2, macOS Sierra 10.12.6

Update curl on mac