CVE-2016-0718: apple mac_os_x
Modified
AliasesALPINE-CVE-2016-0718MGASA-2016-0193RHSA-2016:2824UBUNTU-CVE-2016-0718USN-2983-1DEBIAN-CVE-2016-0718
Published 26-05-2016Last modified 08-10-2026
Vulnerability summary
CVE-2016-0718 is a critical (CVSS 9.8) vulnerability in apple mac_os_x. EPSS estimates a 13.26% chance of exploitation in the next 30 days, higher than 96.3% of scored vulnerabilities.
Priority
Prioritisesevere
Severe, CVSS 9.8 (NVD); no exploitation reported by the 5 checked sources; EPSS 13% (FIRST, 03-11-2026)
Source freshness unavailable
How is this decided?CVSS score
9.8/10
010
Critical · v3.1 (NVD)EPSS score
13.26%
0%100%
Medium · -0.08 pp in 30 daysKEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 15 · Duplicates 1 · Related 13Timeline
- 26-05-2016PublishedVulnerability first disclosed.
- 08-10-2026Last modifiedVulnerability information updated.
Description
Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed input document, which triggers a buffer overflow.
CVSS metrics
5 scores · 4 sources · 2 versionsCritical 9.8Preferred score · NVD (NIST)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HSourcesAll 4 agree
- OSV · AlpineEcosystem advisory · calculated9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · UbuntuEcosystem advisory · calculated9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
High 7.5Preferred score · NVD (NIST)
AV:N/AC:L/Au:N/C:P/I:P/A:PSourcesSingle source
EPSS trend
Probability
13.26%
Chance of exploitation in the next 30 days
Percentile
96%
Versus all other CVEs
30-day change
Decrease -0.08 pp
From 13.33% on 04-10-2026
04-10-202603-11-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Version check
Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.
Ubuntu13 products
- ayttmAll versions (No fix recorded)
- cableswigAll versions (No fix recorded)
- cadaverAll versions (No fix recorded)
- coin3All versions (No fix recorded)
- expat< 2.1.0-4ubuntu1.2 | < 2.1.0-7ubuntu0.16.04.1
Suse5 products
- linux_enterprise_debuginfo11:sp4
- linux_enterprise_desktop12 | 12:sp1
- linux_enterprise_server11:sp4 | 12 | 12:sp1
- linux_enterprise_software_development_kit11:sp4 | 12 | 12:sp1
- studio_onsite1.3
Redhat4 products
- expat< 0:2.0.1-13.el6_8 | < 0:2.1.0-10.el7_3
- expat-debuginfo< 0:2.0.1-13.el6_8 | < 0:2.1.0-10.el7_3
- expat-devel< 0:2.0.1-13.el6_8 | < 0:2.1.0-10.el7_3
- expat-static< 0:2.1.0-10.el7_3
Debian3 products
- expat< 2.1.1-2
- libxmltokAll versions (No fix recorded)
- debian_linuxEOL8.0
Alpine1 product
- expat< 2.1.1-r1
Apple1 product
- mac_os_x≥ 10.11.0, ≤ 10.11.5
Canonical1 product
- ubuntu_linuxEOL12.04 | 14.04 | 16.04
Libexpat_project1 product
- libexpat< 2.2.0
Mageia1 product
- expat< 2.1.0-9.2.mga5
Mcafee1 product
- policy_auditor< 6.5.1
Mozilla1 product
- firefox< 48.0
Python1 product
- python≥ 2.7.0, < 2.7.15 | ≥ 3.3.0, < 3.3.7 | ≥ 3.4.0, < 3.4.7 | ≥ 3.5.0, < 3.5.4 | ≥ 3.6.0, < 3.6.2
13 vendors · 35 products
References
47 links- www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.htmlX Refsource CONFIRMPatchThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2016-06/msg00010.htmlVendor AdvisoryX Refsource SUSEThird Party Advisory
Show all 47 references
- www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.htmlX Refsource CONFIRMThird Party Advisory
- lists.apple.com/archives/security-announce/2016/Jul/msg00000.htmlVendor AdvisoryX Refsource APPLEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2016-06/msg00006.htmlVendor AdvisoryX Refsource SUSEThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2016-06/msg00007.htmlVendor AdvisoryX Refsource SUSEThird Party Advisory
- bugzilla.redhat.com/show_bug.cgi?id=1296102X Refsource CONFIRMIssue TrackingThird Party AdvisoryREPORT
- lists.opensuse.org/opensuse-security-announce/2016-08/msg00004.htmlVendor AdvisoryX Refsource SUSEThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2016-05/msg00064.htmlVendor AdvisoryX Refsource SUSEThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2016-08/msg00029.htmlVendor AdvisoryX Refsource SUSEThird Party Advisory
- packetstormsecurity.com/files/141350/ESET-Endpoint-Antivirus-6-Remote-Code-Execution.htmlX Refsource MISCThird Party AdvisoryVDB Entry
