First published: Mon Feb 20 2017(Updated: )
An issue was discovered in certain Apple products. macOS before 10.12 is affected. The issue involves a sandbox escape related to launchctl process spawning in the "libxpc" component.
Credit: product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
macOS Yosemite | <=10.11.6 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2016-4617 is considered a high-severity vulnerability due to its potential to allow sandbox escape.
To fix CVE-2016-4617, update your macOS to version 10.12 or later.
CVE-2016-4617 affects macOS versions prior to 10.12, including versions up to 10.11.6.
CVE-2016-4617 involves a sandbox escape related to the launchctl process spawning in the libxpc component.
Users of macOS before version 10.12 are impacted by CVE-2016-4617, particularly those running macOS Yosemite.