vulnerability

OS X update for Messages (CVE-2016-1844)

Severity
5
CVSS
(AV:N/AC:L/Au:N/C:N/I:P/A:N)
Published
May 20, 2016
Added
Jun 2, 2016
Modified
Mar 27, 2026

Description

The Messages component in Apple OS X before 10.11.5 mishandles roster changes, which allows remote attackers to modify contact lists via unspecified vectors.

Solution

apple-osx-upgrade-10_11_5
Title
Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.