About the security content of OS X El Capitan v10.11.6 and Security Update 2016-004 - Apple Support

Linked CVE reports

These are source relationships, not a claim that this article fixes every affected product or branch.

• CVE-2016-0718Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed input document, which triggers a buffer overflow
• CVE-2013-7456n/a: Out-of-bounds Read
• CVE-2014-9862n/a: Integer Overflow or Wraparound
• CVE-2015-8317n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2016-6559The BSD libc library's link_ntoa() function may be vulnerable to a classic buffer overflow
• CVE-2016-5093n/a: Out-of-bounds Read
• CVE-2016-5096n/a: Integer Overflow or Wraparound
• CVE-2016-5094n/a: Integer Overflow or Wraparound
• CVE-2016-4652n/a: Out-of-bounds Read
• CVE-2016-4648Audio in Apple OS X before 10.11.6 allows local users to obtain sensitive kernel memory-layout information or cause a denial of service (out-of-bounds read) via unspecified vectors
• CVE-2016-4643In iOS before 9.3.3, tvOS before 9.2.2, and OS X El Capitan before v10.11.6 and Security Update 2016-004, a validation issue existed in the parsing of 407 responses
• CVE-2016-4653n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2016-4634The Graphics Drivers subsystem in Apple OS X before 10.11.6 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors
• CVE-2016-4649Audio in Apple OS X before 10.11.6 allows local users to cause a denial of service (NULL pointer dereference) via unspecified vectors
• CVE-2016-4642n/a: security vulnerability
• CVE-2016-4645CFNetwork in Apple OS X before 10.11.6 uses weak permissions for web-browser cookies, which allows local users to obtain sensitive information via unspecified vectors
• CVE-2016-4641n/a: Improper Input Validation
• CVE-2016-4647Audio in Apple OS X before 10.11.6 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted file
• CVE-2016-4635n/a: Exposure of Sensitive Information to an Unauthorized Actor
• CVE-2016-4639Login Window in Apple OS X before 10.11.6 does not properly initialize memory, which allows local users to cause a denial of service via unspecified vectors
• CVE-2016-4640n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2016-4644In iOS before 9.3.3, tvOS before 9.2.2, and OS X El Capitan before v10.11.6 and Security Update 2016-004, a downgrade issue existed with HTTP authentication credentials saved in Keychain
• CVE-2016-4646n/a: Exposure of Sensitive Information to an Unauthorized Actor
• CVE-2016-4633Intel Graphics Driver in Apple OS X before 10.11.6 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app
• CVE-2016-4637n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2016-4632n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2016-4638Login Window in Apple OS X before 10.11.6 allows attackers to gain privileges via a crafted app that leverages a "type confusion."
• CVE-2016-4626n/a: NULL Pointer Dereference
• CVE-2016-4630ImageIO in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted EXR image with B44 compression
• CVE-2016-4598QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted image
• CVE-2016-4631n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2016-4614n/a: Out-of-bounds Write
• CVE-2016-4600n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2016-4607n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2016-4629n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2016-4597n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2016-4621libc++abi in Apple OS X before 10.11.6 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app
• CVE-2016-4625Use-after-free vulnerability in IOSurface in Apple OS X before 10.11.6 allows local users to gain privileges via unspecified vectors
• CVE-2016-4596n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2016-4594n/a: Improper Input Validation
• CVE-2016-4615n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2016-4601QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted SGI image
• CVE-2016-4602n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2016-4608n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2016-4610n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2016-4582n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2016-4599QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Photoshop document
• CVE-2016-4616n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2016-4609n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2016-4595Safari Login AutoFill in Apple OS X before 10.11.6 allows physically proximate attackers to discover passwords by reading the screen during the login procedure

Source and provenance

Original title: About the security content of OS X El Capitan v10.11.6 and Security Update 2016-004 - Apple Support. Captured 17 Oct 2026, 14:11 UTC. The stored article is used for enrichment and change detection; BlackTree does not republish the publisher's full text here.