{"id":"CVE-2016-7608","aliases":["EUVD-2016-8458","GHSA-hpv4-92hf-rf6p"],"status":"published","title":"An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue...","description":"An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the \"IOFireWireFamily\" component, which allows local users to obtain sensitive information from kernel memory via unspecified vectors.","severity":{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01111,"percentile":0.66167,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-200"],"published":"2017-02-20T08:35:00Z","modified":"2026-06-17T00:53:20Z","exploits":[{"source":"exploitdb","id":"EDB-44235","title":"Apple macOS Sierra 10.12.1 - 'IOFireWireFamily' FireWire Port Denial of Service","type":"dos","platform":"macos","date":"2017-08-19","url":"https://www.exploit-db.com/exploits/44235"},{"source":"pocgithub","id":"bazad/IOFireWireFamily-overflow","title":"bazad/IOFireWireFamily-overflow","date":"2017-08-19","url":"https://github.com/bazad/IOFireWireFamily-overflow"}],"products":[{"vendor":"apple","product":"mac_os_x"}],"references":[{"url":"http://www.securityfocus.com/bid/94903","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1037469","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"https://support.apple.com/HT207423","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7608"},{"url":"https://github.com/advisories/GHSA-hpv4-92hf-rf6p"}],"sources":{"cve":[{"id":"CVE-2016-7608","description":"An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the \"IOFireWireFamily\" component, which allows local users to obtain sensitive information from kernel memory via unspecified vectors.","status":"published","published":"2017-02-20T08:35:00Z","modified":"2024-08-06T02:04:55.585Z","updated_at":"2026-11-02T14:33:36.483151Z"}],"euvd":[{"id":"EUVD-2016-8458","description":"An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the \"IOFireWireFamily\" component, which allows local users to obtain sensitive information from kernel memory via unspecified vectors.","status":"published","published":"2017-02-20T08:35:00Z","modified":"2024-08-06T02:04:55Z","updated_at":"2026-11-03T02:22:32.403524Z"}],"ghsa":[{"id":"GHSA-hpv4-92hf-rf6p","title":"An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue...","description":"An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the \"IOFireWireFamily\" component, which allows local users to obtain sensitive information from kernel memory via unspecified vectors.","status":"published","published":"2022-05-17T02:25:26Z","modified":"2023-01-27T05:04:16Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:42:25.677567Z"}],"nvd":[{"id":"CVE-2016-7608","description":"An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the \"IOFireWireFamily\" component, which allows local users to obtain sensitive information from kernel memory via unspecified vectors.","status":"published","published":"2017-02-20T08:59:02.387Z","modified":"2026-06-17T00:53:20.633Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:03:35.822579Z"}]}}